APKs harvested from forums or file-sharing sites are not vetted by Google Play Protect at the time of upload. They can contain: