Our shop switched to MS365 from GSuite last year. I can confidently say that Google's spam/phish detection is better. For some reason, Exchange online has no problem with strange .html attachments that contain obfuscated javascript.