Google Warns of Growing Android Attack Vector: Backdoored SDKs and Pre-Installed Apps

[Deep900]

That is a serious problem, especially for the fact they could be installed with system updates (which are fundamental also for new critical security updates, patches and fixes). In some cases preinstalled applications can be disabled with phone settings.