Yes you are quite right. But!
12 months ago I installed or tried to install a $1200 Maxsea Timezero program which was as I remember reported as Malware. This was a purchased software package. Luckily I was able to go to the CHEST and mark it as OK and then reported it as a False Positive to both Avast and Maxsea. If I had the new version of Avast this would not have been possible putting my $1200 program in the bin UNTIL I PAID to have access to the SANDBOX.
RANSOM
How many people out there have had false / positives.
Cheers , Thanks for reading