Why?
I generally agree, but in this case, Google Protect actually protected OP from installing a harmful app masquerading as Signal.
Why?