In general Microsoft does not advise customers to use it as it's less secure than the other flows. For more information about why you want to avoid using this grant, you can, for instance read the ...

The Resource Owner Password Credential (ROPC) flow has been deprecated for public client applications due to security risks. Microsoft recommends using a more secure authentication flow. Follow the ...