Another day, another deleted cloud

Here we go again, as threat actor JADEPUFFER wanders into a Microsoft Azure environment to orchestrate destructive actions. The unfortunate tenant had their Azure resources casually deleted via compromised service principals, because basic credential care is clearly too much to ask. We protect ourselves from this headache only by stopping our service principals from being compromised before our entire cloud vanishes. Why do we even bother provisioning resources if we just let intruders bin them on a Tuesday?