What are they in on? The fact that bad actors are constantly targeting government infrastructure and that this kind of antimalware is a key part of the tools for defending against it?
Based on other comments it can run as kernel module or as eBPF filters on linux. So I guess to them it's a less invasive/more power tradeoff which they'll take whenever it's available.
> The program does not crash or otherwise harm the system.
https://news.ycombinator.com/item?id=41030352
eBPF can cause Linux kernel panic
So while anti-malware might have some merits, on balance much of it would be a detriment to security, from this perspective.
People with this perspective are feeling spectacularly validated today!
As often, it's wise to have a nuanced view of course.