npub1hxf96n4sv94q46mrk29xquqwewwecl2083f9r5wdlnl5erc5nf7q4mg8qu (npub1hxf…g8qu) as some comments have noted,
Microsoft's capability to secure its SaaS email is far greater than most organisation - the very very long tail of organisations from flower shops to metal factories, schools to charities, publishers to even most tech startups.
But quite a few determined groups have capability greater than the Microsoft bureaucracy.