Most email providers support mail forwarding and distribution lists, but maybe they should have added some sort of opt-in confirmation when adding recipients outside the local domain...?

I imagine it's because PayPal uses azure in some capacity.

If you use PayPal for your business, you might want the emails to go to a list for redundancy.