For Office365 / AzureAD this is a configuration choice, admins can enable the numbers option which reduces the chances of accidental allows