A law office cannot have the waiting-room Wi-Fi on the same network as the case files. Confidentiality is a network design problem as much as a policy problem.
Mail that lives on one secretary PC is a single point of failure. Microsoft 365, MFA, and a restore test are the stack. We document it so a new hire is not a security event.