Understanding the Limitations of Microsoft O365 Security