I know that by default there are anti-phishing policies setup in microsoft 365 but then it allows you to also customize policies for users or groups. I'm trying to understand whats the difference between the default anit phising policy and what a customized policy would look like.