> Our interviews identified only a single Linux distribution, Wolfi OS, that performs active malware scanning.

Seems like several authors are affiliated with Chainguard that created Wolfi.

To their credit they do declare their affiliation to Chainguard on the first page of the paper. (It's half the authors of the paper for those who don't want to read)