Is Fusion ERP protected by Fusion Cloud Virus Scanner for document uploads?

Summary:

Doc ID. 2672245.1 indicates that all HCM modules are protected by Fusion Cloud Virus Scanner, is it just HCM or are other areas such as ERP covered by the same scanner so an uploaded document, for example a CV, would be scanned by Oracle before being accessible by Fusion users.

On the same theme, even if the uploads are protected would it be good (or best) practice to use something like a CASB in front of your Fusion implementation to carry out these type of functions?

Thanks in advance.