It will probably be a pain in the ass to say the least.

Aren't they already at risk now? I haven't checked but I would be surprised if nobody had ever included some virus file data in op_return already? And even if you lower the limit (for your mempool) on your node it would still need to accept a block that has bad stuff in it, even if it can be pruned later.