Yes, but if someone makes an OS X malware app, they would still need to think of the distribution channel. Few will download from my-amazing-toolbar dot com. But if your malware is in official app store ... there we go.

What's to stop something like this from happening: http://venturebeat.com/2010/07/28/android-wallpaper-app-that...