GrapheneOS is architecturally *Anti Virus, Anti Malware, and Anti Spyware. *Not running separate software.
Instead of labeling and trying to stop specific programs that are already known to be bad, the OS treats all programs as potentially bad, and isolates everything.
Architecturally speaking, this is how GrapheneOS protects against viruses, malware and spyware, in contrast to the traditionally marketed "antivirus" software which isn't really needed.