It is also a pain for parental controls if your kids use Kahoot or micro:bit with MS auth.

I've had to whitelist a bunch of non-obvious subdomains as well.