The article seems to definitively answer that you can. But yes — if the theory is that Apple is pretending to log malware detection and remediation, one would have to disassemble the relevant parts of the OS to prove that.