of course, they are… there’s no heuristic allowed to produce false positives on important files… and if nothing else, the final check of signature will help