That is not true. Only Android phones from the absolutely shittiest manufacturers have malware pre-installed.
My first step for any new Android device is to root it to kill the garbage pre-installed 'system' apps or better yet, if there is an option, install LineageOS. Newer devices are slowly making this more and more difficult with a few exceptions so I now stick to older devices.