The landscape keeps changing, but in general phishing-style attacks are generally going to be a bigger problem than malfeasance by the actual company I'm dealing with. I also have at least some recourse in that case.

Apple has ways of punishing a publisher who is up to no good (and as we've seen, some publishers who aren't), so I can always run and tell mommy.