Not OP but that was announced back in March https://www.blog.google/products/android/new-malware-protect...

Ok thanks. Somehow must have missed that one - I guess it's voluntary unless you install some work related app where company security policies pretty much default to switching off any possible loophole. I don't like where this path is going to lead :(

The Advanced Protection program is opt-in for people with a high security posture

It also means you _have_ to have 2 security keys set up to login to your Google account with no other 2 factors allowed as backup

I've added a screenshot.