Yeah, this is no different than going to any unknown website. A positive word is that if Microsoft finds out about something very bad being done with an app, they'll yank it from the marketplace.
For example, location. A developer can declare that they need location of a user, but declaring...