Because play protect is a piece of shit that is not very reliable. Google mostly uses it to block installation of apps or remove apps that they don’t like such as cracked apps, or apps that are used to crack other apps.

The real malicious apps are typically able to sneak past it.