Here is a thought worth sitting with: the scanner you trust to inspect hostile files has to parse them, which makes it attack surface, not just your defense.