3) Just because the device has CPU, can run programs and has network connection. Most botnetworks are happy just to get access to computer resources, they don't necessary care about personal information. Just to have one bot more to their botnetwork, so they can sell DoS attacks and blackmail and sell/use bots as anonymity proxies.

I am very concerned about Maemo because the current security policy is as swiss cheese. People give straight *.deb links and people install them (dpkg) without any authentication check.

It is just a matter of time or perhaps we all aready have a sleeping horse in our devices.