I think if a game is a virus here it gets reported and take down
This does not happen immediatly.
Also, people are notoriously lazy in giving reviews, ratings, comments ... and reporting bad stuff.
Some do not even recognize virus games, unless they get hacked by them.
The oldest time bomb I encounterd was about two years in the open. I also encountered one that was several months old even with comments about it being a virus - comments were made, but no reports.
Games that have an alive community are usually ok. And ten fake comments are not an alive community. (Yes, there are fake comments as well on itch)