This is why Microsoft Outlook offers a dedicated encryption option. Not only does it secure the message, but it also keeps it within the Microsoft 365 network all the way until final delivery.

Email encryption requires the recipient to use a one-time passcode, generated by Microsoft Office 365, to decrypt the message and access any included attachments ... by typing [encrypt] at the ...