MSFT can't/won't fix an attack path in their offerings. If a bad guy knows your username format, then they can just spray "Spring2024" or whatever bad password is allowed. www.wired.com/story/the-us...

finally joined the thing