You can fill your phone with malware without ever leaving the Play Store. Similar is true of the App Store, with the caveat that at least hostile iOS apps can't replace your homescreen.