Microsoft clarifies that login token signature verification is included in Microsoft 365 E5 Security with the Copilot add-on. The internal service holding an estimated 17.3 trillion rows was on a tier where tokens are accepted on trust.

Re: Researcher finds unsigned-token flaw exposing 17.3 trillion Microsoft data rows