Token Theft in Microsoft Entra ID (Part 4 of 4): OAuth 2.0 Standard Gaps