Originally Posted by
frankvb
Fully agreed, but to my surprise my corporate MS365 account has the same kind of protection, by default you cannot login from abroad (unless you request a travel exception for specific countries), and a VPN completely bypasses that as well
So even Microsoft seems to think this is a good idea...
Perhaps the idea is simply to force users to connect via a secure channel.