I'm not sure how you can protect against malware aside from not visiting sketchy sites or downloading shady apps. Pretty much by definition they use security ho

I'm not sure how you can protect against malware aside from not visiting sketchy sites or downloading shady apps. Pretty much by definition they use security holes, which if people were aware of wouldn't exist in the first place. Only attack vector I can think of is some kind of SMS attack, to which the "solution" would be to disable SMS, if you're really worried about that. Personally I'm not.