Neither IOS nor Android have a meaningful malware concern. Both are very locked down sandboxed systems of which the easiest to infect, Android requires the user to deliberately disable safety features in order to install.

As incompetent as Apple is when it comes to the quality of their devices I can’t imagine how they’d fuck it up enough to enable any random dumbass to upload malware directly to the devices wirelessly. This kinda stuff has sorta been figured out for more than a decade