Or the app that gets installed manages to access WhatsApp's and Snapchat's private keys on the device. Or compromises a system library that those apps use to generate the user's keys when they're installed. They would be more interesting attacks.