FYI I say it's possible, but they are themselves trusted applications and devs.

Possible the same way it's possible for Amazon to get hacked and compromise your credit card.