If this can happen, is it possible that once mandatory developer verification comes into effect, all 3rd party apps will be uninstalled at first and require a re-install?
Concerning this specific case, NFCGate is a tool on which malware (family) titled NGate by ESET is based, thus likely causing a false positive.
Oh, and no bypass is available anymore (aside from disabling play protect):
Even so, I can’t do this if I want to keep some services or games – I’m currently liberal with my app downloads and around a dozen refuse to work unless they’ve been installed or updated to the absolute latest release with the Play Store version - Aurora versions don’t work. There’s the argument that if it doesn’t work, it’s not valuable enough to keep, but I play games quite a bit.
Find new games to play 😁. 500+ on F-Droid that respect privacy. Though, not every single one is great, I’ve got maybe 5 solid good time killers