Spoken like a full time IT professional (that likely works for Microsoft), defending their actions and poor messaging. Gee golly, we have a good reason to break all these old clients (we like money here at Microsoft, and we want more of yours, by forcing everyone to upgrade as we see fit) - er, er, I mean '"Mail security" is paramount.' No one reads any Message Center notices ever, unless they have flashing bold red font text that says, "Your life will suck unless you read this." Yeah, the "important" flag being set, that's definitely enough.
I think you entirely proofed my point. What I, as a customer expect out of my SaaS (Exchange in this case) is to set it up once at the beginning of time, and never bother with it again, EVER. So, Microsoft is a ridiculous, completely, total failure in even getting into the proximity of that expectation. And as I said, pretty clearly does not want to have customers.