Some interesting comments in the the thread here;

MS link;

Identity and device access configurations - Microsoft 365 for enterprise - Office 365
Describes Microsoft recommendations and core concepts for deploying secure email, docs, and apps policies and configurations.