[HJain13]

>You could unwittingly visit a website that has been compromised to exploit a zero-day in your browser.

In Android, browser, messaging app updates and many even system updates are delivered through Play store (long after system/OS updates have stopped for the phone), so attacks will have to be much more sophisticated.