How is this bad? They are likely sending a SHA-256 hash of the binary, not anything the binary itself to compare it to a bloom filter of known exploits. I'd expect any decent OS malware protection to be doing that.