my friend can login with my Microsoft Account, need to force logout

I will use google translate so what i write can't be perfected (italian -> english).

I went to my friend's house some time ago and I logged into the microsoft store with my account for various reasons even after logging out and returning to my house I find that he just clicked on the email I used previously and to log in he just entered his computer's pin (without using my password or asking for approval from the microsoft authenticator on my phone), later I contacted microsoft tech support who showed me the steps to log out and they said that I had to make him do it, he confirmed that he did it, then our relationship drifted apart and after months I find out that after months he still logs into my microsoft account on the microsoft store and with this download and update minecraft windows edition for free since I paid for it and although he never bought it later he can access my minecraft account to play but apparently besides using my account he can use another microsoft account of his by adding it to the minecraft launcher and feel free to use his main microsoft account to play his account when minecraft he never bought it, he's 16, i can't rush over to his house and fight to remove it from him nor even log him out in my microsoft account settings since changing password nothing happens since it is not requested and the same to change email and remove the one with which I logged in on his computer because apparently it saves automatically without disconnecting on all the connected devices in addition the 4 different keys to disconnect/remove the device/microsoft store/web and app/e account from all devices it doesn't work since he just needs to touch my email to re-enter his computer's pin, he too has windows 11 home and I don't know if is it a problem of windows 11 or is there also in the old windows, of course i contacted the microsoft technical support after i found out but apparently after suggesting 1000 already tried ways, sending me to an operator of a department at other, and having verified in 200 ways that it's really me they kept telling me I can't do anything I'm connecting you to another operator and so on after more than 4 hours an operator showed up who said the only one who can do anything is the owner of microsoft who obviously can't be contacted in any way, i thought the only resolutions were for someone at microsoft to log everything out of my microsoft account so i could log back in on the right devices or close the account completely and lose all data and paid applications since they cannot be transferred. now I don't know what to do because of a child 5 years younger than me, and the only thing I can do besides going to his house and fighting is to ask for help in various forums hoping for help hoping there is someone who has learned some method by which it can be solved, so I ask you if there is anyone who knows something more about solving such a problem, please, thanks. however my RazzaStrana username is the one I use on all the games I play or have played and in no game have I found anyone who has already used it so if you see a RazzaStrana it's definitely me.
my account security methods are: my mobile number, 2-step verification, backup codes, microsoft authenticator.

Have you tried logging into accounts.live.com, and removing his PC device?
https://support.microsoft.com/it-it/...0-67f14d5fdf3c

@garlin I have already done and I had already written many times that those keys don't work they are fake at least if you are logged in on windows 11 @Try3 I had changed my password and wrote that it is not useful because it will not be disconnected anyway and the same goes if I change my email and remove the primary one completely
thats the reason i asked here and microsoft tech support is completely useless

Return to the Accounts page. Security -> Sign me out

This will revoke every device using your account. It says it might take 24 hours to enforce. I don't understand what you mean by keys are fake.

When you logon on to a device, the account token is refreshed every time when a MS service is used. If you don't use any services, this token will expire in 90 days. Since you have Two-Factor and a mobile number, the other person can't change the password or the security methods. If all the sessions are revoked, then every device will need to logon again to generate a new token.

@Prova3 i already removed his device and changed password right after it didn't work

hey @RazzaStrana have you found a solution since? I have this exact same issue and can't seem to log them out, even after changing all of my details, from the e-mail connected to my microsoft account to removing my password as a valid way to access my account.

Change password and setup 2FA.

I have tried this already, it sadly hasn't worked.