This is correct, they do now test apps before they go up. But yeah, plenty of malware is regularly found in the Play Store, so you can't just "trust Google" to protect you.