Adam Shostack :donor: :rebelverified: on Nostr: Looking briefly at this work do I understand right that a root cause is that ...

Looking briefly at this work https://dirkjanm.io/obtaining-global-admin-in-every-entra-id-tenant-with-actor-tokens/ do I understand right that a root cause is that Microsoft rolled out Azure with symmetric authN and each machine has, not the public key associated with the actor token, but a reusable symmetric key?