The salient point being raised here is that the risk of malware may not necessarily be the issue at stake with a mobile device;
the app itself might well be the Trojan or the virus, willingly downloaded by the user because it was free and performs functions the user desires.