The issue then would be migrating all of your existing server to an offline server auth method. If there’s anyone who doesn’t log in during the migration period, anyone else could nab their account name (and presumably everything that account has on it) once it’s fully swapped over.

Plus, if the server remains popular after this, Microsoft lawyers could pursue legal action on the operation to bypass their auth servers as well