Yet another reason why Token Exchange is dangerous 🤯😱

"Bing is allowed to issue Office tokens for any logged-on user"

https://twitter.com/hillai/status/1641146523990753290