... except that they most definitely do still happen in spite of that.

But yes, they do tend to mean less obviously-just-malware apps.