Thank you for sharing, there are many attack cases like this one and misconfiguration is also big challenge.

It is important to take messages in Microsoft Secure Score seriously.