Samsung computer phones used to have a stock app called S Suggest. Then Samsung didn't renew the domain that control it. [vice.com] And made it possible for villains to register the domain and malware infest millions of computer phone users had they spotted the opportunity.
On parity in severity with CVE-2015-2865 [cert.org] from 2015-06-17 which will not crypto sign computer code sent in clear text.
That is unless the phone goes into mission impossible flight mode [reuters.com] of self destruction as in 2016-09-08.