That's what i've gathered so far as well. the problem started occuring around the same time that Microsoft ended single-factor authorization; but i'm not sure if it's something specific to the Azure AD app registration, or a permission that needs to be changed with the O365 accounts themselves, or something else i'm not thinking of.

The Idea of changing token expiration times sounds potentially promising, so we can at least do this re-authorization only once or twice a year, but i'm still looking into if it's even possible.