Malicious attachments are a primary malware delivery vector. Enabling this control provides a low-friction, high-value defence against known dangerous file types.

It would be good to have SPF, DKIM and DMARC checked here as well.