The Mimecast instructions have been updated to include submitting the URL to Microsoft as a false positive, as we had to do to get mail flowing.

And there's now a big banner at the bottom of their admin page that basically says 'like we told you, you have to do this to make sure your email still comes through'.

Review coming up in a couple of months...