A small business I look after gets their email via Freeparking.

Too much (in my view, but I don't expect perfection) spam and malware are getting through. (One user was burned by file encrypting ransomware, albeit four years ago. I've put the fear of ... into them since wrt spotting suspicious emails😁)

There are 12 mailboxes.  Five users' emails are stored in O365 Exchange Online for easy access on the road. The remainder go to files on their PC hard drives or on a file and print server.

The two options under consideration are: 

1. Consolidate all mailboxes to Exchange Online and move the domain to O365

2. Stay with Freeparking and add something like Sophos Email Protection in front.

The incremental annual costs are about the same but the work required for option 1 will be higher (moving the mailboxes). Having said that, having all mailboxes in one place is very attractive from a support and consistency perspective. It would also reduce the likelihood of mailboxes & emails being accidentally, permanently deleted. 

I would appreciate input on any other pro's and con's of each option, particularly views on Exchange Online's spam and malware filtering capabilities as compared to a specialist service. 

I am not asking for a list of everyone's favourite email filtering service😀😀  

Thanks in advance

Scott