Even if the organization locks down employee accounts, forgotten and lost service accounts can still undo the organization's entire M365 environment.
Ghost Service Accounts Enable M365 Data Theft in Chile
Summary + source link. No paywalls, no tracking.