Mobile GUI Agents under Real-world Threats: Are We There Yet?