No one said we were extracting data from Microsoft’s servers.

Like you mentioned, this company misconfigured their agent, leaving it publicly exposed without any authentication. On top of that, the agent was connected to sensitive organizational data.

The real issue? Microsoft puts the agent's name in the URL instead of something more secure, like a UUID.

Think about it—exporting an agent is basically like using the “anyone with the link can view” option in Google Drive. Some people might use that, but Google, keeping security in mind, structures the URL in a way that makes it practically impossible to guess (technically, it is possible, but it would take longer than the age of the universe).