Google's Verify apps can help block known malware infected applications, but sometimes the feature may be turned off. That's when Google uses the "Dead or Insecure" metric to determine which apps are dangerous.
Google Explains How It Can Catch Malware Even When ‘Verify Apps’ Is Turned Off : Read more
Google Explains How It Can Catch Malware Even When ‘Verify Apps’ Is Turned Off : Read more