Yes. The built-in filters are good at blocking spam and known malware, but most modern phishing carries no malware and is built to look genuine. CES adds a layer that reads behaviour, so it catches business email compromise, impersonation and account takeover that slip past the defaults.
