Thank you for writing this (for all to see). I suggest this for "funky" files, for files of unknown/uncertain origin. Not every company has a strong IT/Sec team, with dedicated process and awareness training so that staff can forward funky emails to someone. Also, many companies rely on little or no spam filtering (if Gmail catches it, well done.. if not.. grace for impact!)