I know a lot of customers pushing a lot of strange conditional access policies, because they have no idea what to actually configure, and no experience in what actually works and not. I have therefore made a little starter pack, especially useful for configuring new tenants.
You can find it at my GitHub: https://github.com/goodworkaround/conditional-access-starter-pack