ML is generally not used for serious AV systems, they are sig/pattern based. > Then that signal could be corroborated by volume The more serious attacks are u

ML is generally not used for serious AV systems, they are sig/pattern based. > Then that signal could be corroborated by volume The more serious attacks are usually very low volume, sometimes unique to the victim. > user manually classifying content matching that as spam Manual classification is generally not possible because of data privacy issues and sheer volume, unless you mean by the end-user... but that's a hard sell (what are you selling at the point?)