Really? That's... astonishing. You know what? I hope they do that. So long as they give fair warning, so I don't rock up to work one day and no longer have access to work files / OAuth / 2FA without warning. They send an email, I can escalate. Not my problem then.