The whole point of Apps is that they are reviewed and therefore are safer than random stuff on the web.

It’s would be scaremongering if these kinds of threat were hypothetical, but of they are pretty widely known.