mail is using a entirely different protocol than you use when submitting/receiving files.
Checking (mail)files does not say a thing about the mail content.

Not using the mailshield is like locking all doors in the house, but leaving a window open.

If you want security you need to set it up in the best possible way or it would be useless.