Which is, of course, exactly why they couldn't use any of the normal methods of dealing with malware.

Technically, there are ways of scanning files without necessarily having access to them [1], but they're not production-ready yet.

[1]: https://blog.cryptographyengineering.com/2019/12/08/on-clien...