I don’t think this is entirely correct. I mean, there’s the virus scanning Outlook plugin (for Outlook 2000-2007).