I was wondering if the issue mentioned here has been seen and addressed :
http://it.toolbox.com/blogs/securitymonkey/bypassing-email-av-is-ridiculously-easy-64458
I tried posting a quote of your original post in General topics/Security Warnings & Notices hoping that some of the regular contributors to that topic would offer an opinion, but no response there, either.