A lot of packages and files are still unfamiliar to me by name. I do not know what all those are, though I recognize clamav. (I have never installed it.)
Your situation is interesting to me, but I did not want to mislead you because my circumstances were different. I use a package called opencpn (navigational chart plotting) which had an update some time ago that required libcurl4, so I have been waiting for that package. I manually excluded opencpn in the meantime.
When I did the recent update, apache2-bin was blocked for me too, but because libcurl4 was available, I installed it for opencpn and everything cleared up. I remember libcurl3 was removed, along with a couple of other packages.
In responding to you, it did not occur to me that libcurl4 was involved, because I thought you were dealing with a reverse dependency. Sorry.
I am learning, so take the following as intended to give you some ideas, not as suggestions of things to do. Could it be those packages at the top have been in your autoremove list for a while? They are probably unrelated. As for clam ones mentioned in REMOVED, it appears clamav requires libcurl3, so you have a dilemma.
apt-cache showpkg clamav | grep libcurl
I know holding a package works to stop apt from considering a package for updates, but I have never tried using it to keep from removing one.
apt-mark hold <pkg>
Maybe you can keep clamav that way, but I do not know if libcurl3 and libcurl4 can coexist. In any case, I think you found your conflict.
UPDATED: I had a moment and looked at upcoming Debian packages. If I am reading the information correctly, clamav 0.100 will support libcurl4, so you may just have to wait a bit for it to make through the pipe. (I have asked in a couple of places how PureOS pulls these updates in and from where, but I have received no responses. I have no idea how long it takes.)