Better output results

[Alfredo911]

The report currently lists "improvements" in areas where control adjustments are not available, which are referred to as "default policies." Instead of showing these as improvements, we should mark them as informative and recommend additional policies with the suggested configurations if they are not already set.

For the minimum and maximum spam outbound rules, if there is any configuration in place, it should be flagged as recommended. However, if there are configurations with specific numbers for hourly, daily, etc., it should be considered a pass. This is because smaller organizations might have lower outbound max restrictions.