Does this really solve the problem though? If a file that contains the attack appears legitimate, it could potentially be shared. If the file is saved to google

Does this really solve the problem though? If a file that contains the attack appears legitimate, it could potentially be shared. If the file is saved to google docs or dropbox everyone who tracks that folder is compromised also.