Above is a link to a Sophos doc that has some interesting comments. Not all the time is it the app developers who are at fault, but sometimes third party addons.
however the blame seems to point back to google for not tightening the security issues.
I'm not pointing the finger at any one company or app but in today's world we all know that privacy and security are not what they used to be or should be.
Being paranoid about what we write or say that someone is reading or listening goes a long to show that no medium is safe unless the average person wants to spend lots of dollars which they can't afford for privacy.
Even snail mail can be compromised, I understand where nomeat is coming from, but as a society we give up the right to privacy when we want to be part of and are part of any community.

How to stop being looked at - live in a bubble or be dead