If they associate it with a Microsoft account (or anything that is identifiable) then it becomes PII.

And of course they are.