Searching is google is not safe anymore, they will give us some fake ads so number 2. is very important. In google play store also they allow some fake apps to be uploaded on their platform so better check the official site for the official android app.
It's not that Google allows, they can't keep up with tens to hundred thousands of those apps being released. There are those developers which insert malware through their built-in update components so Play Store might not be able to detect until the next scan.