It was interesting because the article didn’t get too much into the details of it. But anything using Oauth2 like most major emails (eg Gmail) aren’t impacted by this. It sounds like only the ones with user name and password are sent. Without understanding more detail it’s kind of hard to be up-in-arms.
Kinda like youre saying, at some point any email app needs your credentials to get your emails. The app, necessarily, can read your emails.
The author of the article didn’t do a good job explaining the issue imo. How does it “normally” work versus what Microsoft is doing?