Looks like conditional access policies working as intended tbh.