I definitely used Thunderbird for an O365 account that required 2FA and so had to use OAuth, back to.... 2021 at least, I think. Though I think you might have had to know to change the auth method to OAuth to get it working, at least at the time.