And for your average less tech-inclined Android user, the only way to download an App that had that exploit, was to install from an off-market source and sideload the app. Which by default is disabled in Android. So the only way to have infected yourself with that would be:
Dig through pages of developer options in Android's settings, enable installing of APKs from non-market sources. Then you would have to download the infected app from a private website with no affiliation to Google, ignore the permissions the app requested upon installing, and happen to have a phone and software compatible with Gingerbreak (the Gingerbreak root method never even worked on my Droid 1 anyway, it always failed and gave me boot loops).
If you managed to fit all that criteria, you deserved bad things to happen to you.
Next?