his whole story basically is like old school hacking "let's see if I can get into their system" lol

Ah yes, no safeguards against 2FA spam on the authenticator's end and hardcoding admin credentials in a PowerShell script. These guys really are the gold-standard for security.