One sample remains to dynamic testing, that looks more like real world scenario, except web-protection/filtering still impossible to test.
My personal impression, people just don't like that favorite AV may will be infected, then talking about real world scenario to excuse...
