Spam, phishing, virus blocking - no builtin measures. It is easy to integrate rspamd (literally adding one line into config). ClamAV can be used via clamav-milter though some configuration is needed - no direct & easy integration for now.

maddy implements de-facto standard milter protocol so it is possible to use any third-party filtering software supporting it.