I have a large filesystem that I index. I couldn't care less about scanning things for malware, but this mechanism could help there...
Except, it looks like the interface does not generate events for file moves.
I know about the other notification mechanisms, but the tree is rather large and I do not want to have to add inotify_watches for all of the directories within... I assume (perhaps erroneously) that inotify does not scale to tens of thousands of directories.