1. A system, comprising: a hardware processor of an inline filtering device for in-line filtering of applications for mobile devices, the hardware processor configured to: intercept a request for downloading an application to a mobile device; cache or quarantine the application at the inline filtering device pending determination of a result of a risk analysis of the application based on an application risk policy, wherein the application is blocked from completing a transfer to the mobile device while it is cached or quarantined at the inline filtering device, and wherein the determination of the result of the risk analysis of the application comprises to: determine a response based on an application risk assessment for the application, wherein the application risk assessment is based at least in part on a first behavior associated with the application, the first behavior including the application adds secondary Digital Rights Management (DRM) to protect the application, the application adds Virtual Private Network (VPN) support for secure communications, or any combination thereof; and modify the response to the request for downloading the application to the mobile device based on the result of the risk analysis of the application based on the application risk policy; and a memory coupled to the hardware processor and configured to provide the hardware processor with instructions.