That's correct. Currently both Android and iOS provide better security features than SailfishOS. The only security "advantage" that SailfishOS currently has, is obscurity.

I use SailfishOS because:

1) I prefer programming for GNU/Linux over Android or iOS

2) I prefer a decentralised development model (SailfishOS is made up of software by Red Hat, Intel, Mozilla, etc.)

3) I prefer the tight-knit, open, hacker community around SailfishOS/Maemo/Meego