They have some additional services they advertise that supposedly deals with these, though I’d imagine they require installed software which would give them more visibility into systems than I’m comfortable with.

For trackers and to some extent malware, they could potentially block some by disallowing outgoing traffic from the VPN to known tracker IP’s/domains or C&C hosts/networks, but I could see that being fairly infectivity overall with potentially for false positives.