[notahacker]

I don't think it's unusual for people to have more apps than music albums installed on a particular device, and people that audit them in any great detail are very much in the minority. I'd be surprised if the average person could even detail the differences in security implications between downloading an mp4 music video or downloading an executable application purporting to be a music video from the website of a band they like.

It's not exactly as if good old-fashioned music CDs never installed rootkits on users' computers either.