Clearly financial gain is THE prime motivator, although notoriety is a close second - mostly because it leads to money.
The war, though, is certainly winnable. The idea of certified manifests is getting close to the solution - there is certainly more work and thought to be applied to that though.
End user expectation management is in order too. The days of downloading software are coming to a close. I really don't see the need for most devices to have this functionality. Downloading from a known trusted source is one thing. Downloading from user configurable sources is mostly stupid - since the vast majority of users are simply too stupid to make good decisions.