Either they are not programmed to filter out the worms, or there is no support for a plug-in that can do it for them.

I suppose Spam Assassin can do it for them, but not everyone runs it. They should.