“However, these vulnerabilities are dreadful.”
Azure holds ISO 27001 and SOC 1, 2 and 3 certificates. Dropping an authentication header still bypassed security on a management interface. The az command line tool weighs over a gigabyte. Compliance paperwork says the controls work. The bugs say otherwise.