iMore’s Nick Arnott has the most sensible reaction to the Masque attack I’ve read:

Apple has a lot of safeguards built into iOS. A Masque attack tries to get you to circumvent those safeguards and install malicious apps anyway.

It’s not a bug, but Apple needs to fix it. It’s also incredibly unlikely that any average user is going to get hit by this.