I guess I'll have to ask for a phone along with a laptop from any potential employer that requires this app. (I wonder if MS Authenticator would even run on my de-Googled Android.) I'd much prefer to keep work equipment separate from personal equipment anyways.
The new Microsoft authenticator app checks if the phone is rooted and checks for valid GPS and VPN connections before it'll allow access for example.