I know several security professionals who do incident response and therefore see a lot of IT setup across multiple domains since ransomwares are endemic nowadays, and according to them 99% of the shops they intervene run Office or Outlook(365) in some capacity.