Between exploits and spam, there is also the possibility of phishing. I have heard of fake Yahoo Mail apps making the rounds but couldn't find them - maybe that was outside of the Play Market (it was in Asia, where Yahoo is big).