I'm surprised that this wasn't brought up during trials as an argument against Apple's supposed "curated" walled-garden. There is a bunch of dangerous scammy junk on there.
I think I ran into one of the most dangerous situations without looking for it. What happens if you install the first result and put your microsoft account credentials in...