Personally I don't use apk files and only use the Playstore and Galaxy Store for my apps.
I try to make sure I'm visiting secure Internet content.
I do not have the built in virus scanner activated on my phone's as I feel for me personally I don't require this function and have found this and downloadable scanners to be a resource hungry.
Daily Driver > Samsung Galaxy s²² Ultra 256Gb in Phantom Black.
The advice I offer is my own and does not represent Samsung’s position.
I have no affiliation with Samsung.