I actually agree with you (that Microsoft&#x27;s internal processes are more security orientated than Google&#x27;s version of the same).<p>That being said: A lot of Android&#x27;s security issues are not always Google&#x27;s fault. Some of them are in generic Linux libraries, some of them are in OEM added components (Samsung), and some of them are security issues unique to an app ecosystem (i.e. on Windows Win32 user applications normally have full permissions as that user, on Android an APK running as a user has a limited set of permissions, if it exceeds those permissions this is now an &quot;exploit&quot; which is now an additional set of security issues), and many are simply malware being placed on an app store.<p>Android&#x27;s biggest issue isn&#x27;t really that it is poorly designed (in particular with SELinux as standard). Android&#x27;s biggest issue is how horribly the OS update mechanism works, so relatively minor security issues may not be fixed for years.