The real solution..
Is to pay attention to the permissions being requested by what you're installing, and the reputation and reviews of the publisher, but the same type of people that would get suspicious that someone asked for their house key and social security number on a first date can't be bothered to pay attention to what they're doing on their phone, tablet, etc. Maybe it's because our brains are wired by evolution to not think that something as innocuous as a feather touch on a phone display can set in motion an immense chain of events and repercussions. Of course anyone that has drunk texted their friends or lovers has likely come to understand this in the light of day.
There is a great deal of freedom and flexibility with the Android platform, but you do have to consider the decisions you make, and a decent freeware AV isn't a terrible idea either. Some people may be better off in the walled garden, at least until more security is built in by default.