Use the exact app page you intend to visit, check the source and review the app name, version and Android requirements before downloading. Scan unfamiliar files and only enable Android’s install permission for the browser or file manager when it is required for that specific installation.
Afterward, disable the temporary permission, review the installed app’s permissions and keep your device updated. Do not install files received through unsolicited messages or share OTPs, passwords or remote access with anyone.