My understanding was that the median iPhone is much more secure than the median android phone due to things like regular updates being widely installed. Lots of the things that used to be worse for android (eg bad app permission model) have been fixed.