Fake developers upload a benign dummy app to the Play Store first to get a "Play Protect" badge. Then they swap the file on their own server. Play Protect does not scan outside the Play Store. Do not trust the badge.
If you want legitimate alternatives, I can help with:
Even if a native port existed, Uncharted 1 was designed for the PS3’s Cell processor. Modern mid-range Android phones lack the specific architecture to run it natively without heavy emulation. High-end flagships might brute-force it via emulation, but there’s no “one-click APK.”
Avoid random blogs or YouTube videos with "Download links in description." Use reputable modding communities: