We use 3rd party apps to secure. CIPP, Petra, Avanan, Dropsuite, Usecure, Yubikey along w/mfa and P2 Lic where we can. Slowly switching to passkey. I know we need more security in areas based on client needs and but that depends on the client budget. Purview is nice feature but needs an app to format the output form all our clients. We use DLP for compliance clients and works to catch any targeted info in emails. Not hard to setup. Just be thorough in your documentation on setup.