It's always best to have an AV installed on your Android device even if you're not rooted or only downloading apps from the Google Play Store. A lot of rogue/malicious apps get posted before they are checked and taken down.
I also use CM Security. Been using it for a few days now after...