Kerberos is designed for untrusted networks.. and Azure AD is just AD hosted somewhere else. Same problems.
Azure AD DS (https://azure.microsoft.com/en-us/services/active-directory-...) is a specific offering from Azure which gives you a hosted AD instance, but otherwise AAD is completely different.