It did come out of nowhere.
Every cPanel and CWP, to mention a few use it.
csf is NOT anti-virus, that is handled by ClamAV.
So there is no need for any other anti-virus like imunifyAV, etc.
csf also hasn't been 'forked', that is an add-on to csf.
There is FirewallD and fail2ban as options.