If you want to see a real mess:

* Create a consumer MSA based on a Gmail account

* Invite that MSA into an AzureAD directory

* Try to sign in as that user to that directory.

Good luck!