If malware has root access it can alter everything on the phone without you ever seeing it. Any information falsified, all detection tools subverted.

Possibly, if Google is logging everything on their servers. It should be relatively easy for them to find out who got infected.