Entra has already had vulnerabilities where a user in one tenant could access global admin of every other tenant. Somehow everyone didn't immediately move off Microsoft's cloud platforms.