No need for a prepaid plan I haven't used the MS authentication but almost all 2FA apps actually don't need Internet access (apart from the initial setup). I would just graph some old phone and connect it to WiFi.
Never use your own personal phone for work related stuff.
As someone who does this, my main issue is now I am carrying around two phones. This is a daily annoyance for me.
My next round I think I am going to drop the work phone and use Androids profile options. Setup a work profile on my personal phone and just use that.
Then just have work reimburse me for my personal phone/plan.
Say everyone agrees and the entire world swaps to some alternative. Email 3.0 or whatever.
Wouldn't we just have the same issue? Any form of communication protocol (that can be self host able) will get abused by spam. Requiring a lot of extra work to manage.
This is totally an enterprise feature. I have read enough enterprise documentation to know that. For example All of the wording talking about who is going to use this is "Admins", "organizations" and "end users". That is business/enterprise 101 talk right there.
If it is even available on the home versions it is going to be off by default as it requires a good bit of setup to turn on.
If Microsoft wanted to track you via DNS they would just do the same thing that Google and Apple are doing with their phones. Have a secure DNS option that is on by default. That uses DoH amd happens to use their DNS servers.
Also Microsoft doesn't need DNS to track anyone in Windows. As they control the OS.
No need for a prepaid plan I haven't used the MS authentication but almost all 2FA apps actually don't need Internet access (apart from the initial setup). I would just graph some old phone and connect it to WiFi.