While the app might not be able to harm your phone, your grandma or daughter might not be as tech savvy and grant permissions more freely. Also, even though sandboxed, if you can download and run u known code on the devices of billions of users, you have a very large phone-botnet at your disposal of you ever need it