Review whether guests can reshare items they don't own, alongside their site permissions.

Use an upload-only link to collect files without exposing the destination folder.

Retrieve available Entra LAPS password history with Get-LapsAADPassword.