Why you think that website are unable to control malware or other harmful payloads?

In form of directly executing code or something encouraging to download and run programs containing it.