Let me add one that I ran into, which doing a search a whole slew of people have. Their MFA simply does not work - not in edge cases - in very basic straight forward cases.

I sign up for an account. It wants a phone number. I enter the phone number. It sends a text to validate it. Except it never sends the text. I go into my profile and enter it there. It still wants me to enter it for validation, and wants to send a text. Which it again never sends. You can try the next day, you can try two weeks later - they just don't send a text. My carrier is sprint/tmobile, spam/phishing protection is disabled. And no, like most other places, they won't robocall you and voice-read you the code.

A month later, your account is blocked because you didn't validate it.

Now, this is for their free accounts. If you pay them, this issue does not exist. In online forums, their support staff make ridiculous claims: our mfa server is down (for 2 weeks?), reinstall your browser, here's some instructions on how to click the "send sms" button.

So I use free microsoft accounts as temp accounts for orders that are going to spam me, and when they die in a month - all good.

Here's the thing though - for all of microsoft's user hostile practices, google's products are fifty times worse.

funny thing though - if you look at smaller shops specializing in one or two products, you don't have to use microsoft or google stuff, and there is a better alternative for everything those two make.