Instead of one malicious APK, the technique involves a "Dropper."

Apps flagged by this system typically include malware, ransomware, spyware, or apps that attempt to circumvent native Android security controls. 🔬 Academic Analysis of App Verification Mechanisms

This time? Nothing. The installation bar filled smoothly. The app opened.