Great post, I was actually having a discussion with my team about this very subject on the same day this got published. Spooky!
I do have one question regarding however. In a Hybrid environment when changing a users UPN in Active Directory which has an Exchange Online Mailbox the primary SMTP Address does not get updated automatically on either end to reflect this. Exchange on-prem and EXO still show the original UPN. Even after forcing an update of the Email Address Policy.
Typically we would need to change this when a member of staff changes their name, such as get's married for example.
To resolve this we have had to modify primary SMTP address within the proxyAddresses attribute under the users account within Active Directory then force a sync with Azure AD Connect.
Is there an official supported way of making the on-prem UPN and Primary SMTP address match between the two environments?
Many thanks.