Use python script to create a task (no user interaction)

I am trying to create tasks in MS Todo using python but I am getting lost in the complexities of the Azure portal. I have a personal hotmail account, which is connected to my MS Todo app. I have registered the webapp in the portal in the default directory, set a secret and added API application permissions for Tasks.Read.All Tasks.ReadWrite.All (admin consent given).
Here is my code:

import json
import requests
from msal import ConfidentialClientApplication

client_id = '<my_client_id>'
client_secret = '<my_client_secret_value>'
tenant_id = '<my_tenant_id>'

msal_authority = f"https://login.microsoftonline.com/{tenant_id}"

msal_scope = ["https://graph.microsoft.com/.default"]

msal_app = ConfidentialClientApplication(
    client_id = client_id,
    client_credential=client_secret,
    authority = msal_authority,
)

result = msal_app.acquire_token_silent(
    scopes = msal_scope,
    account = None,
)

if not result:
  result = msal_app.acquire_token_for_client(scopes=msal_scope)

if "access_token" in result:
  access_token = result['access_token']
else:
  raise Exception('No access token found')

headers = {
  "Authorization": f"Bearer {access_token}",
  "Content-Type": "application/json",
}


task_list_id = "<my_list_id>"

task_details = {
    'title': 'Buy groceries',
    'dueDateTime': {
        'dateTime': '2023-04-14T22:00:00Z',
        'timeZone': 'UTC'
    }
}

response = requests.post(
  url = f"https://graph.microsoft.com/v1.0/users/<my_user_email>/todo/lists/{task_list_id}/tasks",
  headers=headers,
  data=json.dumps(task_details),
)

print(json.dumps(response.json(), indent=4))

The script gets an access token but then it returns an error:
OrganizationFromTenantGuidNotFound

{
    "error": {
        "code": "accessDenied",
        "message": "Access denied",
        "innerError": {
            "code": "OrganizationFromTenantGuidNotFound",
            "date": "2023-04-13T09:30:29",
            "request-id": "<my_request_id>",
            "client-request-id": "<my_client_request_id>"
        }
    }
}

What am I doing wrong? I know I cannot use the application permission with /me/, that's why I am trying /users/<user_id> instead. Is there a way to get this to work?
thanks