While this is great - I keep envisioning a world of security where the cure is almost worse than the disease (ie system is slowed so much evaluating each action). Also this doesn't seem to guard against Cryptolocker or any of the ""click here to view the USP shipment waiting for you in your local post office"".