If that is in fact how this works (I haven’t dug in too far) then technically yes. The problem is, these are one off zero days. You can’t exactly test that this problem exists unless you know it exists, and if you know it exists then Apple knows it exists (in the case of a mainstream antivirus app at least) so there’s no point in actually attempting to exploit it, just throw in a check for vulnerable versions.

There’s no one size fits all “all pdf exploits that ever will exist” solution because there are exploits that will likely not exist for a time.