I also use GrapheneOS, but isn't this the whole point of Play Protect? I'm assuming it was installed outside of Google Play, which is likely a red flag to this software. The average user probably is better off with this behavior. Although, users should be able to disable if they can't already.