It was bad at one point, I remember seeing games out there which could easily rack up the account and there was no warning except for in the fine print. This is why the Apple and Android market places have put more stringent standards on letting you know what apps have permission to do, and making a push for programs to let you know that you're about to be spending real-world money. But it's been fixed to a reasonable degree for quite a while now.