It’s true that certain Microsoft 365 plans come with Exchange Online Protection and Compliance Center, which provides an initial layer of security. However, there are no native security features in Microsoft 365 designed to stop Business Email Compromise, social engineering, and spear phishing attacks.