The Rise of Native Phishing: Microsoft 365 Apps Abused in Attacks (bleepingcomputer.com)

This is an ad for Varonis (which Bleeping Computer makes clear in the header)

yep... security should be one of the top concerns now

That is why data resilience is important and thus it's critical to have some mechanism to restore data in case of a disaster nmentioning. Most secure and reliable way is to opt for a third party software like GitProtect.io