What about when they go to Windows 10?
Isn't one of Microsoft's big selling points how they're unifying the OS from mobile to desktop? I don't know how true that really is as far as allowing malware to take hold though.
So long as they stick with ARM and don't fall for Intel's advances they're probably safe, but something running the same Windows kernel on the same x86 might catch some Windows viruses even if WP10 devices aren't the intended target.