EXO Direct Sends

For m365-to-m365 direct send malware attempts... I see many say using connectors and reject the email. I setup up on connector for redirection to gateway, blocking all the rest instead (unless it came from our gateway) - This feels cleaner and a catch-all-best scenario. Is using connectors for all your white listed ip relays better and why?