On the bright side, my new Import from Instagram implementation does not require the antivirus scanner, or additional hardening against zip uploads.
Can't wait to finish the new @pixelfed engineering blog so I can explain this in more detail