"in order for a user to be affected, they'd need to install a potentially harmful application which we continually monitor for with VerifyApps and SafetyNet. We strongly encourage users to install applications from a trusted source, such as Google Play."
IOW, don't download shonky apps and you'll be ok. You'd have thought El Reg could have included the exact scenario necessary but that would undermine the clickbait, wouldn't it?
Shoddy, scaremongering, incomplete reporting. Clowns.