There are also issues like this one where the legitimate installer on the legitimate website is replaced by a malicious one. I believe secure app stores verify the downloaded APK matches what was expected.
1 Like