Accepting a Teams guest invitation can drop users into an unprotected tenant, bypassing all Defender for Office 365 controls.