Yes, but you (and most of us on HN) are more cautious than the average consumer–ALL of whom use mobile phones.

You really think everyone is going to visit the Bank of America site first? People will simply Google "BofA app for droid" ... then they may land on an unauthorized phishing app.