

Spam filters don’t and should not have some global default whitelists that bypass all protection. One simple reason would be that someone’s account is compromised and it sends out malicious mail.
I have seen Microsoft Defender spam filter detecting legitimate Microsoft mails as spam. It’s just how spam filters work, there always can be false positives.
Another example is Exchange where all Admin Center (GUI) operations are calling PS commands underneath. Not everything is in Admin Center so you must use PS eventually. Not to mention that you cannot perform batch tasks without scripting.