Currently only for business customers which probably use OneDrive or SharePoint anyways, so it’s not that they need that to exfiltrate data. But for a phishing/hacking attempt? There are probably some nice possibilities.