Microsoft 365 does have advanced in-built security. However, some attacks rely on human error, and these often can’t be picked up by software-based defence solutions.