Not really a “anti malware” per se, but you can always set up a separate linux device (like a orange pi zero 3) and set it up as a network ad blocker with nextdns (which apparently it can be (also) a “anti malware” – which I haven’t tested if it is legit or not, but eh.).
Looks promising. Hope it has a power draw close to the rpi 4 one.