These emails will be flagged and likely auto-deleted before they hit the inbox. Many people, myself included, set up a filter to flag or delete anything that’s not from an @microsoft email. It’s easy to grant an @microsot address to any vendors you’re working with so there’s almost no reason to talk to outsiders that haven’t been vetted, and there’s a constant stream of phishing as well.