Comment by shadowgovt

You do not want malware protection to be running at the speed of the legal system.

A better analogy, unfortunately for all the reasons it's unfortunate, is police: acting on the partial knowledge in the field to try to make the not-worst decision.