> Sometimes it's too much info to give out. You want to accept phish/malware and silently drop it so that the bad actors don't know you've detected it.

Users' interests are served by being informed when this happens. And plain text correspondence is not easily mistaken for malware.

> A perfect technical configuration doesn't make you inherently trustworthy or provide you with faultless reputation.

No one claimed such.