I mean, I'm happy to be conspiratorial about it too, I give Google no benefit of the doubt, but outside of Play Protect I don't think they explicitly say "your phone is telling us every app you install." This new feature is them making that explicit.

How can you say “outside of Play Protect” when it comes enabled by default and hassles me to turn it back on every time I install an APK?