Install apps only from Google's Play Store to be sure they've gone through Google's review process. If there's an app that its developer has opted to provide outside of Google's purview (i.e. Fortnight) or you live in a country that doesn't allow Goggle to provide its services locally, you then need to be wary of every apk you obtain so be sure to research the source of any download. There are several sources like
https://www.apkmirror.com that get the apk files they provide directly from the Play Store, plus there are very popular, user-verified sites like
https://f-droid.org or
https://fossdroid.com that provide only Open Source projects where there are also a lot of apps available that their respective developers intentionally choose to avoid the oversight of Google and its Play Store.