For developers who need to provide mobile access to their hosted apps, this event makes it easy to decide on a path with regard to "Native apps / Web apps ?" question.
One XSS or SQL injection vuln in your webapp and your users could be just as rooted as the victims of this malware. Exactly like in the desktop browser world.