bjoern_tantau , 4 hours ago

The basic security stuff exists on Android and iOS as well, namely full disk encryption. When that is defeated through a missing or bad password nothing keeps them from installing their malware with device access.

If they got in through an external security vulnerabilities in some software package the situation is also the same on either OS.