How do you know an AI step did the right thing? A fixed rule either matches or it doesn't, but an AI step reads a messy email ...
Content Security Policy enforcement on login.microsoftonline.com will stop browser extensions from injecting code during authentication. No workaround. No exceptions.