If I had to pick one, I’d pick whichever is going to conform better with the team. Then only use that ecosystem and hardware, for work.

Taking that option off the table, and I was considering which one is better… Google is the easy winner. Google has some pretty decent toggles, with (most) settings having documentation. They also support E2EE for business clients. Google also has a pretty good history of data security. In comparison it feels like MicroSoft has a big vulnerability announced at least once a year.