Right around half of "all threats" are only found on one machine. I'm assuming that's one Windows machine. What's the point of a signature-based detector agai

Right around half of "all threats" are only found on one machine. I'm assuming that's one Windows machine. What's the point of a signature-based detector again? Also, I'd like to see the same kind of figures for Linux.