Reporting cross-Tenant issues as an outsider with a vulnerability chain gets you $$$.

Reporting “theoretical” issues with validation as an Employee gets you a lot of questions as to why you were looking.

Oh well.

So MSFT discourages employees from reporting vulnerabilities?

That explains a lot.

> Reporting “theoretical” issues with validation as an Employee

Microsoft still has employees ? ;)

(Sorry. Low bar. But in all honesty I thought they outsourced the majority of ops. I was surprised to hear in recent news that they actually had that many employees left)