Building azure management group structure is very similar to the Active Directory Directory Services structure, and it has the same sensitivity.
Microsoft diagrams regarding landing zones are mainly about creating a single subscription and vNET per landing zones. Still, I see a lot of value in separating landing zones into subscriptions to use policy and separation.
