Good advice above.

Our CSO has a view that M365 is the easiest to manage from a security standpoint for user management and user rights. Think scenarios where an employee resigns and you are uncertain about how email and other documents are being used/shared, you have controls.

Both organisations (MS and Google) have invested massively in security and then it comes down to your policies.

Cheers,
Bruce