Is mobile malware really a risk?