This is correct. Currently Xeams sends every attachment, even if they are apparently harmless. It is very common for viruses to hide behind harmless extensions. For example, if you rename a DOCX files as RTF, MS Word will still open it and could run the macros.

Although JPG and PNG are harmless, it is better to send them to ClamAV to be on the safe side.