Actually the answer is quite simple, their servers are the ones retrieving emails so they have access to the email contents (perhaps for training data?)
Prior to this new version, Outlook did not pull emails through Microsoft servers but pulled them directly from the mail server configured. Now, when you retrieve email from Outlook New, Microsoft servers are "proxying" the emails through their systems.
Even client side, that doesn't explain (as per article) a complete do-over as a web app wrapped in a browser.