We covered the basic security options that are available to all M365 plans here. This is the equivalent of locking your doors at night, a good idea, but not enough if you have someone that really wants to get into your house. Unfortunately there is no equivalent of a "safe" neighborhood on the Internet, if you are utilizing email you will eventually be targeted for a break-in!
The biggest attack vector for breaking in is email.