You assume that secrets circulate only within organizations and that no external parties (contractors, business partners, investors) are involved. Outbound fil

You assume that secrets circulate only within organizations and that no external parties (contractors, business partners, investors) are involved. Outbound filters aren't smart enough to detect escaping secrets. And inbound malware scanner can just as well run on the target device or it can be invoked from the device for suspicious attachments.