They’re doing this because there’s demand (with actually, non malicious genuine needs), and the feature is clearly advertised AFAIK.

It’s not some evil conspiracy. Microsoft does enough shitty things without us needing to blame them for their users’ shitty OpSec.