Spam filters don’t and should not have some global default whitelists that bypass all protection. One simple reason would be that someone’s account is compromised and it sends out malicious mail.

I have seen Microsoft Defender spam filter detecting legitimate Microsoft mails as spam. It’s just how spam filters work, there always can be false positives.