Oh, Scarlet, if only it were that simple 
It doesn’t work that way: when you try to publish such an app, the Store simply issues a warning and refuses to publish (this is described in great detail in my Medium journal at the link above):
Unfortunately, I’ve encountered an even worse problem — now I can’t update an app that has already been published in the Store (update ~7 hours later: the local moderator of “answers.microsoft.com” deleted my message, citing that my complaint about the impossibility of publishing an update resembled a threat (lol, what?), so link is outdated now, sorry).
And all my arguments that neither VirusTotal nor ANY.RUN detect any threats in my current update don’t help.