It's the app's fault they were scammed, I think this is more a case of pointing out that there are ways of mitigating this through the app store. Whether that's enough though is another question entirely.