Looks like the issue with my #Exchange #M365 tenant is a Cloudflare problem; they’ve stopped publishing my MX record.
Only the SOA is being returned when querying the MX, regardless of DNS server used; despite record being ok.