If this can happen, is it possible that once mandatory developer verification comes into effect, all 3rd party apps will be uninstalled at first and require a re-install?

Concerning this specific case, NFCGate is a tool on which malware (family) titled NGate by ESET is based, thus likely causing a false positive.

Oh, and no bypass is available anymore (aside from disabling play protect):

  • GreenCrunch@piefed.blahaj.zoneEnglish
    221·
    4 days ago

    I mean there is the problem of malicious apps on the Play Store (though that should be handled by Google reviewing submitted apps better). Maybe Play Protect could uninstall those once they’re discovered? Seems a bit late. There’s uninformed users being fooled into installing malicious APKs outside of the Play Store by blindly following malicious instructions, but Play Protect is just another step to follow.

    I figure what’s more valuable to Google is the marketing that Android is secure and a list of apps installed on your phone.