Thank goodness for that!

> However, your friend can get out of this scenario by following the instructions on this site

Thanks for the tip, will try and walk him through this next time I'm with him.

> hey'll end up with <whatever_they_can_find>@outlook.com for their Microsoft account

I doubt they actually need/want access to the Microsoft account. They don't use this work email address for any consumer services, as far as I'm aware -although how could one tell what services it could be associated with?