"Normal" users won`t touch the settngs and will rely on the smart scan results telling them that they`ve only got basic protection and to upgrade at once to save themselves from an impending doom.
Check Play Protect. On Android, review Google Play Protect and keep app scanning enabled. Follow up on its warnings even if the app seemed to work normally.