> 2. How are they handling IT security?
Well, now, they can handle it more seriously, which before - they couldn't quite. That's because Microsoft - your company - is one big security breach. You are known to pass information that gets into your hand to the US federal government's intelligence agency, and you probably use it for all sorts of commercial purposes, like training AI models, directing advertising etc. So, by installing Microsoft Office, especially Office365 and cloud facilities, they were ensuring a security failure.