Uhhh, repercussions like what?

sudden closure of donated azure services without prior notification and time to move off.

having to pay back some of the money.

the project planning with the promised donations as a given (they don’t get all of it upfront, but as they get the most of it it’s actually fair) and microsoft either using it as leverage or just carelessly terminating the contract to save money.

in extreme case banning the project from microsoft owned services, including github.

any of that in decreasing order of probability if implementation is different from expected (like not baking in specific security tools to the project) and the parties cannot agree on a solution.