Right now, I think a few factors play a role in the security. First, it's a fairly new OS. Secondly, the ecosystem is too closed for any thing to really cause any major issues, if any. Last, the Market Place policies and review seem to be too strict.
If I'm not mistaken, this is the reason the MS never tried to have flash developed for the OS. They felt that it posed a security issue. Besides, as of right now, even with the new development tools available, you still don't have access to the core OS of WP7. It only allows you access to certain functions. The developers tool kits are registered, I assume, considering you have to purchase it on a yearly basis. So, it actually makes more sense for a person to try and make money from it, then being malicious. But, the issues we do have are, people who develop crap apps and charge for them, without being able to try them out. So, there are scam apps but, you have to mindful what you download and not purchase anything you can't try out fully.