This is why I think Chrome for Android is a big deal. The browser will always be one of the easiest ways run an exploit. With the browser tightly coupled with the OS, many old phones will never receive an update for it.

The WebView as attack target is a different story, though.

You made a great point. Why did you have to ruin it with an emoticon?

Because they're common speech patterns on the internet these days, where it's difficult to show emotion via text. You could have just as easily said "why did you grin after saying you ate pizza?". A better question might have been: "Why the 'sticks tongue out at in silly manner' face?"