There was an interesting paper about insecure use of DexClassloader by many top apps: http://blog.iseclab.org/2014/03/06/execute-this-looking-at-c...