Before I run any bulk change in Microsoft 365, I do two boring things first.
1. Export the exact target list. Run your Get-Mailbox or Get-MgUser filter and pipe it to Export-Csv. Open the CSV and read it. If someone's on that list who shouldn't be, you just caught it for free.
2....
