[epups]

You can implement security measures on top of what is provided by Microsoft. If you have encryption at rest and you hold the keys locally, for example, even this high-level leak would not expose you.

That said, good luck implementing and managing that in a large organization.

[tpool]

Large organizations are exactly what I'm thinking about.