Wasn’t worried about security, as plyphon says, unless you tell it to install, it won’t.
followed by:
me being a complete luddite (and there being no option for “no”) pressed ok.
now have some app, 360 Mobile Security, on my phone.
makes me wonder how many people now might be having everything they do on their phone being sent to some server in Russia/etc?