If these machines were backend systems (which most of the ones that mattered were), you have to ask: why are they running malware detection when they should hav

If these machines were backend systems (which most of the ones that mattered were), you have to ask: why are they running malware detection when they should have minimal-to-no surface area for an attacker? That's the real question here.