Thanks for the links. I wasn’t aware of those, it sounds like PlayStore level of crapware in those cases, although you have to be REALLY dumb to be fooled by such obvious ones. But if you’re a very technically challenged person I am sure it is possible.
But the case with the LastPass clone is definitely much more malicious.
That’s oversimplifying it quite a lot. Many tech-educated users, developers, IT experts etc use MacOS/iOS. And many users of Android or other OSes have no idea what they are doing. All the large operating systems today are too wide to have a one demographic, they cover it all.