Microsoft has (very quietly) announced that it will be changing the way account sign-ins work in February – and the new system could pose a significant security risk for some users.