Google's much-trumpeted Play Protect system, which is supposed to guard against malware in its Play store and on Android devices, has fared poorly in its first test.