What do people make of ICO's recommendation for production servers to have antivirus software installed? Is this a standard approach to Windows? Is it generally accepted?

Please excuse my ignorance.