Some context: I've been using Linux as my home OS most of my adult life and have never used anti-malware software, but someone I know uses anti-malware software on MacOS and sometimes asks me about the warnings that it pops up. Most of the time these are about some outbound connection being made by an application. Usually a little digging finds that it's something obscure but innocuous (e.g. recently it flagged a connection to Google's safe browsing service). Honestly there are so many false positives, and the information provided is so limited that I have trouble imagining it's really useful in practice. But it's software I don't use on an OS I don't use, so it seems quite possible I'm wrong.