Yes, to some extent people should be worried about apps potentially containing exploits, but then again they should be more worried about 0-days than a known vulnerability.
Why should a publicly known unpatched vulnerability be a lesser concern than something that you don't know exists?