APK stands for Android Package Kit. It is a package of files required for installing an app. You can delete it after installing the app.
Well, it can. But a virus running on Android can't really do any harm unless you MANUALLY give it permissions when it asks. Every app in Android is isolated and they can only access their own files unless given permissions.
Of course, some advanced viruses can bypass these permissions. But those are pretty rare and Android is continuously updated to "patch" the security holes used by these advanced viruses.
Getting APK files from trustworthy sources is still important. Search online forums (like reddit) for site reviews before downloading from them
After downloading the APK file, open the Files app (sometimes called a file manager). Go to Downloads directory and tap on it.
File manager might ask for a permission to "Install Unknown Apps" and some versions of Android (like MIUI by Xiaomi) might display scary red exclamation marks.
But don't worry it's safe to enable this permission because it will still ask you every time an app wants to install another app. Like the image below
Simply tap install when asked "Do you want to install this app?" and it should appear on your home screen
H.T.S.G. by Aesistril is licensed under CC BY-NC-SA 4.0