Security Risk ??????

Saw this article at the BBC website ..

BBC NEWS | Technology | Latest mobiles 'open to attack'

WOW... Correct me if I am wrong but don't you need security permissions to almost anything kool in a the mobile java environment ???

I dont think the guys behind the JSR would not secure the part that allows a MIDlet to listen to phone conversations. Accessing the address book is offcourse required and i bet this would be a protected method (needs permission). Will have to check out the new package, I believe it should be the PIM package. If i can access the phone conversations.. that would be so cooool...

IMHO native applications pose a much bigger risk as they do allow access to each and every dam thing ( ok.. not everything) on the phone ...