They’re constantly expanding the Active Directory schema and adding a lot of cool new features to Active Directory

you by letting it rot and become a security nightmare while trying to force everyone to move over to azureAD/entraID?