I cannot find a setting that tells ESS to quarantine suspected email attachments rather than delete them. I see that you can set it (Email client protection) to not clean but that means it won't quarantine, doesn't it?
I had someone email a JavaScript file to me in a zip container but ESS deleted the file (false positive) and I don't see anyway to recover the file. It would make more sense to quarantine email attachments rather than delete them so you can recover safe files.