This might have changed but for most highly sensitive enterprises I’ve worked at android is typically banned. Even if select phones from Google or Samsung aren’t full of supply chain compromises, the number and variety of android devices that are decidedly untrustworthy is breathtaking. Apple makes this stuff pretty simple and unless your internal security team wants to become an expert in every manufacturer and version of hardware and its interplay with every version and derivation of android, just banning every outside of iOS is much easier.
What is the logic behind that? Haven't 80% of all high profile phone hacking cases against journalists and government officials involved iPhone or icloud?
BTW, Samsung has an enterprise program for direct patch delivery and control of the phone.