Take the current URL from your PC web browser and push it to your device, over the air. If it’s a web page, it’ll open in the Android web browser; if it’s a Google Maps URL, it’ll open in the Android Maps app.
Meaning that now, not only can spyware pop up porn on my parents' home computer, it can also push porn to my kid sister's cell phone? Ditto for apps... I imagine spyware is a thing of the past for most Googlers, but it certainly isn't for the majority of users.