You are absolutely right!
While it is true that strategy will not work against info stealers, it will work against ransomware, which was the example I used when I made that comment.
In keeping with the spirit of this thread, it just serves as another remainder that any and all AV/security program can miss any type of malware at any given time...despite what AV marketing and tests may lead you to believe. It's worth noting that people in general tend to too rely too much in there AV's capabilities and as a result, they let their guard down. It is why it is so important to practice good computing hygiene, as it has way more impact on your overall security then any security program can actually/truly offer IMHO. Yes having an AV along side practicing good habits is still a good idea, but it shouldn't be a replacement for using good practices. While you can still get infected using good habits, it still lowers your chances significantly IMHO. As I've said, it is especially hard for the average person to keep up with all of this and it isn't getting any easier unfortunately.
