Not to mention there are notorious phishing agencies that are always hunting.
To battle this, Microsoft offers you two-factor authentication or multi-factor authentication.
Also, the two-factor authentication system isnt mandatory for personal and free Microsoft accounts.