I mean. For the majority geo blocking off anything except their main region would be fine ( whitelisting Europe for Europeans will be fine for the most part ). Especially if you make it opt-in rather than opt-out.

Though I assume they would likely just continue their hack attempts over VPNs.

Yeah I have an old email as well. I rarely log into it, but when I did I saw there are daily attempts from China and whatnot trying to log into it.

Not in the situation where the account is locked out though. I always wondered if you couldn’t reach out to m$ and ask for a geo block at the least.