What keeps someone from creating a malicious wallet app? What keeps a person or company from creating an app like Armory but if you select "import or restore wallet" just emailing them your wallet key after you enter it and draining your account?
Answer: Nothing

Even with the most secure system, you're still trusting their developers.

Remember, secure encryption is not cracked, it's bypassed.