I believe it’s a good practice to ‘wipe’ your p;hone once per week. Only takes a few minutes to do mine. This may not get rid of it if it has copied itself to an SD Card, or do a full backup before the wipe.(you’d possibly just backup the malware)
Security with *most* Android devices is terrible. The code is a mess. A great piece of advice from the article is to only use Apps directly released by Google. Even then, one must carefully examine the privileges/features/areas of the phone Apps are requesting access to.
Wipe? Like with a cloth?