We need a malware vaccine environment.
Normally when healthcare services see infections then we take precautions, so would limiting all users access to websites be like making users wear a face-mask? And making everyone's PC run a full anti-virus check on the disks, every time they open an email while slowing network access down to 1200baud until they are seen as clean, be like getting a vaccine?
Malware is just like a pandemic. It seems that we're a hell of a lot better handling pandemics than malware these days. Sure, all these suggestions would slow things down but we've already see that happen currently.