> And how well they deal with security. I look forward to the day when a malware-distributing webpage can pwn millions of phones without being detected...

Exploits are always possible on any platform, of course, but the web is sandboxed by design and has been hardened against attacks for many years. It's as secure or more than other platforms like Java or the iOS app model.