No, worst case your app steals their credit card info (witness the recent Android bank phishing app) and costs them tremendous time and bother (not to say potentially money) cleaning up the mess.<p>In this case, at the first sign of malwareism, Apple can disable the app immediately for everyone, limiting the damage.