why can't AV do X?

from here (source image)

it amazes me how often 'security experts' will say that AV ought to be able to do better but when pressed will admit to not knowing how to accomplish it themselves. i believe that's the dunning-kruger effect in action, folks.

if you think AV ought to be able to do better, go ahead and build that better AV already.