It appears to me that this article, at least the title, is wrong. The update simply adds a local only api that apps can ise, it doesn't do any scanning. And Google sent out a notification that they plan to use this API in an update to Google Chat. Notably, it will not (at least for now) communicate the scan results back to Google.