Reply to post:

Exactly this. If someone could click on email and run software that alters legal evidence, that same person already had the ability to alter that legal evidence.

Malware wasn't the real problem here.