Not so much about misunderstanding as it is about omitting other details. For one, IOS is a completely closed box whereas AOSP is completely open. You can argue

Not so much about misunderstanding as it is about omitting other details. For one, IOS is a completely closed box whereas AOSP is completely open. You can argue for or against security by obscurity v/s security in open software, but at the very least it needs a mention in any fair comparison. Secondly, most of the blog focuses on average case behaviour. In Apple's case the average, best and worst case are all the same since they make only one device and one OS. In contrast, android is a vast spectrum. Now if you were to give out advice to people with sensitive data, you should compare the best case for both of them, which he briefly does, but not quite as detailed as it warrants. For instance, is iphone necessarily better than a Pixel running AOSP or something like CopperheadOS ? I'm not so sure. IOS's centralized behaviour also makes it an easier target in some ways. Want to attack all browsers on an iphone ? Attack webkit. There are other security fails such as relying on either itunes or icloud for getting data in and out of the phone. Much fuss was made over Cloudfare's lack of a bug bounty program. Apple didn't have one either until quite recently either.