> When was the last time there was an outbreak of malware on Apple iTunes or Google Play? How many users were affected?

Daily, based on the number of apps I see where the updates include security fixes.

> If every web page had its own full chroot/jail (or equivalent), then they would be as secure as native applications.

You should read up on the Chrome security model - they're trying hard to produce this.