Here’s my usual spiel:
For the most part, it’s still quite difficult to get an actual virus on your phone, because malware requires you to manually accept the installation (which is why they try to fool you into thinking you’re installing something legitimate). Use common sense:
1. Avoid shady websites that deal with things like porn, gambling, and “free” (aka pirated) apps/music/movies….