[DethNinja]

It is just a precaution measure, some of the malware like DDOS Bots might persist more than 6 months.

Honestly, an immutable OS would be more ideal but it isn’t very realistic. If you are adventurous, it would also be possible to setup a system where host image gets rebuild every night and persistent data gets pulled from a git repo.