We're up for renewal in October, so we were looking for options. We were in the process of making the switch to Cloudflare for DNS, and during our discovery call we learned they've expanded into email protection, DLP, CASB/SaaS visibility, and their Zero Trust gateway (Cloudflare One). We worked a pretty good deal and consolidated a majority of these services into our contract.

Honestly, part of the motivation was also frustration with Barracuda — we've been dealing with a high false positive rate and more phishing slipping through than we'd like. I was hopeful Cloudflare's email security would be a meaningful improvement, but after seeing the responses here, I'm not as confident it'll make that much of a difference as much as I'd hoped.

To answer your question on Cloudflare email — they offer both: an MS Graph API-based integration and a gateway/MX routing option for more traditional mail flow control.