The problem is that AV software is generally rubbish, and always has been. They never spend enough time worrying about false positives, which they erroneously think makes them more secure (err on the side of caution, right?). But excessive false positives only makes people disable the broken software, meaning the proper positives don't even get tested.