I get that the malicious instructions could be encoded or obsfucated and all that, but this is about defense in depth, so every little bit helps