Malware domains can also be blocked via DNS (not the malware itself but the known domains which distribute these so the malware will never able to access your device). All you need to do is to subscribe to relevant malware blocking lists.
Whlist both Adguard (public) and Mullvad do offer some blocklists, afaik these are mainly for privacy (they have the exact subscription lists available on their websites).
However, you can easily use Adguard Private DNS or NextDNS and add malware blocking subscriptions.
As for this malware itself (in case if it will reach your device somehow) - I don't know for sure as I am not a dev but Graphene is very secure on its own so afaik unless the malware abuses a not-yet-discovered vulnerability, it should be ok.