Good point, although that's iPad-specific.

The issue is really the update situation, and it's two-fold*:

1. Even Nexus devices don't get OS updates for long enough - basically every Android device on the planet drops off the support roadmap after about two years
2. Carriers are chiselling grasping bastards
3. Vendors are chiselling grasping bastards
4. Google can't or won't use the Google Play Services agreement to circumvent 2 and 3 (e.g. by enforcing a rational Android OS update programme)

There's lots wrong with Apple, of course, but 2 and 3, whilst still true, don't prevent updates from getting to my phone.

There's a hypothetical 5, too - the ability to tick the box that says "use unknown app sources" or whatever it's called. I'm pretty sure most people who do that in order to get App X on their phone aren't fully cognisant of the implications, and there's piss-all Google can do (short of having real-time dynamic app security analytics including static analysis - basically the security audit that's done as part of accepting apps into the Play Store - built into Android itself) to protect people.