I tend to agree, e-mail security is actually pretty easy, just not on Microsoft stuff like Windows. If I can look at the headers for any e-mail sent to me, I can tell within about 10 seconds if it's legit or not. However, for some goddamn reason, Outlook makes it impossible to look at e-mail headers. On every other e-mail program I use (Linux, Android, and self-hosted webmail), I can see the entire header block of the e-mail with two clicks or less. On Outlook on Mac, there is no option to view headers that I can find. I can view the entire source of the message, after faffing around for minutes and doing several searches to find the option. And I have to use that option every time I need to see the source of any given message.
In my other e-mail applications, I can inspect links before clicking (Either hover or view info), but in Outlook, not only does it not show me the link at the bottom of the window (A word-wrapped tool-tip popup, brilliant!!), the whole 'safelinks' bullshit that O365 runs everything through (Often twice) makes it nearly impossible to tell what the original URL was. This might help users not step in every single bear trap that lands in their inbox, but from what we've seen here, it doesn't, it also prevents power users like us from protecting ourselves using tools we have everywhere else.