The thing is the better you do a job of protecting your users from virus-ridden mail the more likely they are to fall for it and get infected if it does somehow get through.