[rtehfm]

I mean they _do_ have VirusTotal to compare hashes to. It's obviously not fool-proof but it's an option.