I’d say their new 2FA setup is still weird. Not properly documented, and enabling broke all my devices. ActiveSync for example is not working (even with app/device specific passwords)