Can we please have some clarifications on the license requirements that are missing from this article. There is considerable mention of Defender for Office (MDO), both plans, and occasionally a mention of Office 365, and no mention of Exchange Online Projection (EOP). EOP is your baseline for mail flow protection and MDO requires additional licenses but works across multiple services such as Teams as well as email.
Nowhere in this article do you distinguish between what is available if all I have in Microsoft 365 is a mailbox and what functionality needs MDO. Also it would be useful to know if the QR code metadata extraction applies to links in Teams chats (as MDO will protect these with SafeLinks) and also attachments in SharePoint / OneDrive or Forms.
Thanks
Brian Reid