@david the answer to that is "No". They do the same shit on the administration side of things too. Hell, they change entire urls needed to access critical components of the M365 environment at random it seems.