You've probably got a Microsoft 365 tenant that works fine on the surface, which is exactly why it's risky. Mail flows, Teams chats open, SharePoint libraries sync, and no one is asking hard questions about who still has standing admin rights, which apps can read and write across the tenant,