Even more, I blame non-existent sandboxing. Anything could practically be root for a long time.

With proper permission control and isolated storage for apps, installing anything does not equal cesspit of virus-laden software.