To answer your question, from experience, Device Code auth in Entra exists because of the myriad of ways that SSH is used (like from within VS Code white remotes) and where you need to login to the Azure CLI from (DevOpsy tasks).

Not a *great* answer, but sometimes port forwarding is just too hard.

Health NZ's IT cutbacks: Faults could 'snowball', report warns Hospitals face a greater risk of many more cyber attacks due to the mass layoff of IT staff, according to a Health NZ document.

Do not put much faith in this: "Investment in cybersecurity has continued and is not included in the activities stopped or deferred"

I work in cybersecurity. Security teams can't achieve much without the resources and support of the rest of the organisation.