How a few legitimate app developers threaten the entire Android userbase (Ars Technica)

If such collections starts to be built in a metasploit fashion (I mean easily re-usable), I could foresee the arrival of the dreaded worm that should make securing android (with timely updates) a top priority for OEMs, carriers, and law makers.

Android has been protected from this with the huge diversity, but if software authors are building { device: exploit } collections, things should get much more interesting (and dangerous).