Ok, maybe I've been too hard on you. It honestly seems to me now that you're unable to grasp the whole root of the discussion. We're talking about attacks that are in the wild - happening as we speak. One has many, other has in practical terms speaking none.
I can provide you with links like this all day - and you can provide me with black hat research proof of concept or pwn2own proof of concepts. 
If you simply checked to see the app was requesting the ability to send SMS messages, you didn't have to install it. Without granting it specific rights to do so, it could not have done so. Also, that app is not in the Play Store.
From the article, "The key to remaining safe is to always check the permissions. The Activator package would have had to specifically ask for the permission to send SMS messages when it was installed. This should always be a warning to Android users. Games don’t need to send SMS messages, neither do any registration or activation apps that they subsequently try to install."
Next? Try this time to not bring up software that has been banned and removed from the marketplace, as you are simply proving that Google is very focused on removing malware from the market.