I'm not sure how it happened, but we have a "sharing password to customers by secure link" feature in my company, that uses a button the customer must click, that does the post.
It's still working fine ;)
Maybe microsoft bot does only execute javascript at runtime, but does not (yet?) click any button ...
... in that case I'm fine for some time.