play protect is a scam to scan your phone - it tack user behaviours such as how many app you use, where you paid, etc. so that google make your profile and send a targeted algorithm after you to extract money from you.
i generally side-load apps so that it doesn't get tagged with my mail.
you will be surprised to know if we do virus scan from aps download from google own app store chances are may be flagged for viruses, i first discovered it in google keep app, and later in their photo app.
Here is an example - get this apk
https://play.google.com/?id=fm.castbox.audiobook.radio.podcast&gl=US & go for a scan, it has a spyware "
AndroidOS/Banker.AR.gen!Eldorado" which track keystore when user visit bank sites.
here is the scan result -
https://www.virustotal.com/gui/file...f82d6b174846eb8f6a565406f268090e99f?nocache=1
View attachment 123165
So what Google Play Protect is doing ? why google is not taking down this app
Because its objective is not what you think.. it sole objective to scan your content, extract EXIF information from all your photos and videos, hash files and send it to sundar pichai.
When someone says, virus/spyware in android platform - safely ignore them. just dont pay for anything which is intangible.
there isn;t any data privacy, specially if any of the condition is true:
1. residing in India
2. Has adhar card link with mobile number
3. used COWin app
4. using Jio network
5. used arogya setu
just ensure you are safe from banking side, safeguard your money. rest nothing much we can do.