Also by and large reputation is a good first step in a security process.

While any USB stick might have malware on it if it's ever been out of your sight, that one you found in the parking lot is a much bigger problem.