My mom has had several generations of Galaxy A5x and basic iPads, it makes absolutely no difference. She simply never installs any app.
Some things are actually worse on the iOS side. It took years for Apple to catch up with spam and scam calls/SMS detection.
Plain Google search is still the main vector of scams, I eventually set up NextDNS on her devices.
> Plain Google search is still the main vector of scams
How incredibly sad this fact is. And even sadder all the second-level implications about how it got to this point. And then sadder still that there is unlikely anything done about it in the foreseeable future.