So is CNET. If you don't believe me, look at the reviews they give bose headphones.
This goes for every smartphone that can run apps. If you give an application full permission to do whatever it pleases with whatever data available, then yes, spyware is possible. Blackberries have comprehensive permissions rules in place and they prompt you to set them before a program downloads/runs, which is great, and if you're ignorant enough to click yes allow trusted continue agree on everything, then you're going to get got.
I know anytime I put something on my phone with the word google in it, I go through its permissions very carefully!