It was indeed against the developer agreement to do this. But more importantly, we simply don't know whether Android is actually protecting customers or not.

It was indeed against the developer agreement to do this. But more importantly, we simply don't know whether Android is actually protecting customers or not. If people are just clicking through a warning and having their address book copied against their wishes, that may technically shift responsibility onto them, but it doesn't mean they are 'protected' by a 'correct' platform. It just means that Android is protected from accusations.