But unless Gmail users are diligent ... And, if you're downloading an app from Google Play or the App Store, the chances of encountering a malicious app are low (though still possible).

and will be available when accessing Gmail through a web browser or via Google’s Android and iOS Gmail apps. However, according to Google, the feature won’t replace Gmail’s previous approach ...