Using Power Automate to save email attachments - safe from phishing?

At my job, I frequently receive many invoices that I need to attach to expense reports, so I created a Power Automate flow that saves all attachments from emails that A) Come from specific email addresses from which I frequently receive invoices AND B) Have the word "Invoice" in the subject line. The attachments are saved to a folder in my Business OneDrive and it's very handy.

But my question is, is this a potential security risk? If one of the email addresses were to be hacked and send me a fake invoice attachment, wouldn't it automatically download the malicious file? Is this something that Microsoft has addressed? Are there any anti-phishing "checks" I can add to my Power Automate flow to make it safer? Thanks in advance!