There is no AV module or adapter in our toolbox. This is indeed considered out-of-scope, as files being processed by the bridge are not interpreted or executed, and hence pose no threat to the E2E Bridge services.
There are many mature tools on the market, some even for free. So you would go with you last proposal, setup one of these standard AV scanners and configure it appropriately.
Does that answer your question?