You can never defend against user stupidity, regardless of the OS. If Maemo (or MeeGo) were a big enough target, and your users dumb enough to be convinced to load software from some random, no-name website, then yes it could happen.