The problem is that many AVs are not tested well, and prone to actually making you more vulnerable by bugs in their analysis code. Basically, think of receivin

The problem is that many AVs are not tested well, and prone to actually making you more vulnerable by bugs in their analysis code. Basically, think of receiving an email with a malware attachment. If you have good hygiene, you won't open it yourself. But your AV will open it to 'scan' it, and that gives it an opportunity to compromise it. Add the fact that most AV runs with high privileges and is not sandboxes, and this is a pretty bad state.