Is it worth pen testing office 365

I have been asked to pen test our office 365 tenant. As this is quite an expensive exercise I'm wondering if there is any point, we can't patch any vulnerabilities.
Do you agree?

cybersecurity exercise office office 365 patch pen pen test pen testing point test testing vulnerabilities