Certainly the ICC would be using something more secure than Microsoft hosted email?
And even this case it's pretty obvious that they are under attack.
If you run your own server, you might not know that you've been compromised.
Maybe not the 'main threat', but most certainly a threat. Have been since 2002.
You may or may not if run your own server. In a case of the hosted solution you are absolutely can't know.