Wasn't there news recently about popular games picking up stuff from the phone that they are not supposed to? If I keep my passwords / certs on my phone, anyth

Wasn't there news recently about popular games picking up stuff from the phone that they are not supposed to? If I keep my passwords / certs on my phone, anything that hacks my phone gets access to those, no?