Excel is flagged unsecure for previous version but MS 365 bundle is flagged OK.
If one component is unsecure the bundle is unsecure!
Hope this helps.
PS: MS does not stress to update from the previous version???
This feature is not yet implemented, it already has been requested here: Inherit Vulnerability Status.
@Tom You see how important this featuer is for the security status.