Answer
Yes — OAuth 2.0-based authentication for the mail transport connector sending through Office 365 is supported, covering the legacy-basic-auth deprecation Microsoft has been rolling out; setting it up involves registering an app in Azure with the appropriate mail-sending permissions and configuring the connector to use that app's credentials rather than a stored mailbox password.