How would a user unintentionally introduce risk to their corporate environment leveraging authorized cloud applications?

By using weak passwords to security their online token repository

By integrating a third$-$party service, e$.$g$.$ a professional news feed, into the authorized cloud application

By using their corporate device to access SaaS applications when the device is away from the corporate network

By accessing the authorized cloud application from multiple endpoints and multiple physical locations