Certain Microsoft 365 plans do come with Exchange Online Protection and Compliance Centre, providing an initial layer of security. However, there are no native security features in Office 365 designed to stop Business Email Compromise, social engineering, and spear phishing attacks.