If the discussion is about reviews from blogs and specialized websites, the risk should be smaller, especially if the review exists on multiple sites and some of them are well known. At that point the app may be mature enough too.
Review from specialized websites more trustworthy instead blog review (personal blog), sometimes blogger only re-write from other blog without trying first.
What I found on the page from Symantec is that this malware is possible targeting Jio 4G network users in India, who already have a free app that protects them from xHelper.
That's why India becomes a country with so many androids infected with xhelper.
It seems my android got infected too, see the indication android infection xhelper is got many notification ads, but the ads only pop up when watch sport streaming.
Besides only install app from google play store, there is 4 way how reduce the risk malware infection:
1. Always update the system and apps
2. Note the access permit requested from app
3. Backup important data
4. Install antiviruses and official security which suitable with the device to protect device also the data.
(Free translate from this
websites)