Hello,
I'm now aware of an exclusion import and enabling process for making Office 365 services functional, https://support.sophos.com/support/s/article/KB-000038173?language=en_US&c__displayLanguage=en_US
The majority of business's use MSFT services. I think these exclusion should be pre-populated, enabled, and updated by Sophos.