Microsoft's upcoming Teams update, set for targeted releases in early November 2025 and worldwide by January 2026, will allow users to initiate chats with only an email address, even if the recipient isn't a Teams user. This feature raises security concerns among experts.
This can all be disabled using the Entra b2b guest policy, from what I understand.
Very stupid to have this turn on by default though.