What keeps someone from creating a malicious wallet app?
Answer: Nothing

Even with the most secure system, you're still trusting their developers.

Remember, secure encryption is not cracked, it's bypassed.