It's fair to say that Android is a big attack vector. Google is responsible for leaving the door unlocked, sure. But the data that's stolen is not Google's data

It's fair to say that Android is a big attack vector. Google is responsible for leaving the door unlocked, sure. But the data that's stolen is not Google's data. It's independently grabbed data. So you can use Googles platforms to gather data, but you won't be getting what Google has.