Microsoft added a new built-in configuration to both ATP Safe Attachments and ATP Safe Links called Built-In Protection Policy.
You may notice that Simeon has detected this change in the nightly Sync and our summary emails. If you see your tenant pending approval, you may disregard it as it will self resolve.
Please let us know if you have any questions.
— Team Simeon