well as i always used to say, most of the times there has to be an ignorant user to help a nasty program to harm his computer, but after understanding this article, think about a user uploading such a widget in apple's website. Its very easy to trust widgets hosted on apple's website. What im not sure about though, is if apple checks the code of the widgets it hosts or not...