Emails pulled from Microsoft Quarantine indiscriminately ends up in inbox

[ToffenDask]

The recent "Automatically restore if Check Point classifies as" feature has been a great time saver for our teams, manual restore requests requiring analyst intervention have dropped to almost zero.

While this works great for "Clean" emails, it kind of breaks down a bit when applied to emails that Check Point categorizes as "Spam" or "Suspected Phishing". Those we do not want delivered to the end users inbox, they should still be regarded as potentially unwanted and delivered to the Junk Email folder. I understand from the documentation that this is the expected behavior, I'm just curious whether this is a limitation in what Check Point can do within Exchange Online or a conscious choice by the developers?