None of this invalidates the work that Bluebox has done. Malicious apps have snuck into Google's app store before, so the fact that a security firm uncovered the exploit first and disclosed it to Google is a good thing. But there's a big difference between a potential security issue and one that actually affects huge swaths of users. Frightening headlines aside, this flaw is an example of the former.
Sign up for CIO Asia eNewsletters.