Because anti-virus is unlikely to spot the majority of them before install as they don't require anything to be installed before the user clicks. Once they do click, you can scan the app but if it doesn't match an existing signature it won't get picked up. And enough get through on each version that the bad guys keep at it.