It depends on your account and usage pattern. I came back from an overseas business trip 10 days ago and it was prompting me constantly. After a few days, it settled down. However, on my phone, I am still getting prompted left and right, nearly constantly. I have moved most stuff off Microsoft system and working on the final bit of data, so I still have my phone logged into the account via EAS.
I think it saw the sudden change in IP address and region as a clue but it's such an antiquated way of doing things when it captured my device's UUIDs. Google is got this down to a science. Google challenges me when I feel I should be challenged but my usage, location or pattern is so out of norm. Microsoft' approach feels like some 2nd grader wrote the logic.
Now, if you look at Microsoft's strategy of auto-login into every damn app, be it Windows, Edge, Teams, Office.... all without additional password prompts, I don't get this unusual scare and care on EAS.