The SMG Threat Defense-CAS integration is not sending attached CSV files to CAS for analysis. All other forms of content and malware scanning operate as expected on CSV attachments.
The SMG Threat Defence integration identifies CSV files at plain text files rather than as structured data and exempts them from Threat Defense scanning.
This issue has been addressed with the SMG 10.7.4 release.