This pattern is the rule rather than the exception across MS ecosystems, but to see Microsoft itself do it is particularly egg-on-face.
MS security has put significant effort into tooling and best practice documentation to try and prevent these types of major screw-ups