As a user, O365's default spam filtering was just terrible about 2 years ago. I got so many false positives that I had to check my spam folder multiple times per day. I ended up adding very aggressive domain whitelists because I was so tired of it.