RESTRICTIONS

Summary from the TLDR InfoSec newsletter

You can't control what users click on. When they're distracted or in a rush, they might give attackers red carpet access that bypasses every well-crafted control in your Microsoft 365 environment.