To be clear.
They scan both sent and received.


"from external providers to your Account, or from Proton Mail to external unencrypted email services"