Tenant Restrictions v2 in windows Defender is Insecure

Recently I had a conversation with Microsoft and an implementation partner around direct access from managed laptops to M365 services. My contention was this is inherently insecure as without tenant ...