[jyl]

Also, Apple has tighter control of the iOS version actually running on phones, they get the installed base of iPhones upgraded to the latest iOS plus updates, very quickly. iOS 9 was just launched in September and already 66% of iPhones are running it.

Google does not, they have no ability to push upgrades directly to your phone, even OEMs like Samsung has no ability, it is in the control of the carrier, and the carriers are really bad at it along with being ready bad at every other aspect of customer service. Android 5 Lollipop is on only 20% of Android phones, even though it was released a year ago. To further complicate things, the versions of Android out there are overlaid with carrier and OEM customization, and sometimes outright forking.

So most iPhones are on the latest and most secure iOS and Apple can address new vulnerabilities with rapid updates. Most Android phones are on old versions of the OS, they get updated slowly if at all, and I question just how much priority Google, the OEMs, and the carriers put on security. Well, actually, I'm sure the carriers give it very little importance.