It's a balancing act to not trigger too many false positives while also not missing any malware. Hitting more false positives to also get more true positives ca

It's a balancing act to not trigger too many false positives while also not missing any malware. Hitting more false positives to also get more true positives can be a good thing when even one false negative can be destructive. I don't think any AV wants to present false positives though. That's just annoying to users and they're going to disable the AV if it tries to tell them half the things that they download are viruses.