If this is in place
Set-LabelPolicy -Identity AIP_Global -AdvancedSettings @{OutlookBlockUntrustedCollaborationLabel=$labelInternal}
Can anyone confirm, how would it work if a user has labeled a document as "Internal" and creates an email labeled "Public" and attaches the document - will Outlook still require the user to confirm if email is sent to an external domain, the same way as if the email itself was labeled Internal? Or does the above only cover email labels?