I'm not sure that's true... Xcodeghost was a single attack that affected ~4000 apps and got it contained comparatively quickly, whereas Android devices get infected with virus-laden with quite regularly.

https://www.androidcentral.com/nearly-impossible-remove-andr...

https://www.forbes.com/sites/thomasbrewster/2019/07/10/25-mi...

https://in.pcmag.com/security/138196/android-users-need-to-m...

https://www.foolproofme.org/articles/169-over-1-million-andr...

https://phys.org/news/2019-07-malicious-apps-infect-million-...

And this is just five articles I found from a superficial search.

Now don't get me wrong. I absolutely abhor the Apple's App Store and their overzealous security policies, but they work. I just don't think they're necessary to keep our devices safe.