All fine except that they were android games, and had been marked as malware for a while by multiple vendors, so your automated scan wasn't much use. In fact much less use than either VT or OPSWAT in this case.
I know VT is not perfect, none are and the main issue with VT comes from being up to 1 month behind the current definitions, but in this case they were aware of the malware.
The first of the uploads was available for a considerable amount of weeks before I noticed it.
I would say that shows you need to revamp your process. If mods can't get through the list in time and the AV scanner is not flagging something for early review, what happens if you get twice as popular with twice the uploads ?
Deal with it soon before necessity forces your hand when you have no choice and you are trying to clean up a mess.
There are easy ways to integrate VT or OPSWAT APIs into the site and client for the users safety that do not have to change your internal structure of operations.
Note: Compared to PCs the AV software install count on mobile devices is low as many rely on the builtin protection.
Google Play Protect did not recognise any of them as a threat. This means vast amounts of users would blindly trust them due to false validation.