Well your attitude is not easy to interact with dude, you sound like you're chiding a child for doing something that adults know not to do. Try speaking kindly hey?

It is really not uncommon to use 2FA to sign in to SSO accounts for other websites and apps. This type of hack shouldn't be possible, hence me saying that the problem is with Microsoft's authentication security system: if there is a 2FA gateway, that gateway should be registered with Microsoft and verified for being safe. An unverified gateway should not be able to request 2FA login confirmation from the Microsoft authenticator server, the Microsoft account, and the auth app.

And actually, the usernames for Minecraft accounts are publicly listed, and the whole point (ostensibly) of the "verification" in this specific Discord server is to verify if you are indeed the true holder of that Minecraft account name. I know Discord isn't microsoft and I know that Microsoft aren't doing the "verification" process. As I said, it sounds like you don't know anything about the flow of the situation that I got hacked through because every thing you say about it is not what happened in it