Actually if you know anything about android, you'll know that only about 80% of its total code is actually a part of aosp. All of the proprietary Google functions and apps are not. Any Google apps have to be side loaded through a gapps zip on all Google unapproved Roms. That would be any that don't come from Google or a manufacturer.
I should also add that malware can't actually damage a phone, unless it has root access. Which the majority of android users don't even know exist, only ~15% of all android users even know about it and even less are actually rooted. Thanks to Microsoft and Apple being overly zealous in their attempts to downgrade Linux, the uneducated public are afraid to try it, as they have given it the bad stigma of being "unreliable and unstable". Even if they have tried Linux, the average user doesn't know anything about the su program and doesn't need to access it
Now then, I will go back to my point, android, Linux and Mac os are inherently more secure than windows. Hence all of the band aids Microsoft has to release for it on a monthly basis. Microsoft makes it far to easy to access and modify the system partition.
Hence this command in cmd which will hose your system. "del C:/*.*" Notice the simplicity involved with that statement. Any hacker could include this in a batch file or program, and the average user wouldn't even know. Unlike Linux/Unix filesystem's where you need to type "rm -r" just to be able to delete into the file structure. It also requires root access, and to get that you need to know the root/administrator password. And even if they do, rm still asks the user if they are sure they want to issue the command (as it deletes recursively). Whereas the equivalent does command I entered earlier has no check to keep the user from accidentally entering it, once you do it starts deleting.
Sorry for the lengthy response, but I hate seeing posts that claim that windows is the most secure os in the universe. If you don't believe me try entering that command into cmd yourself. Its a very simple command and doesn't really require any technical knowledge at all to do, just basic cmd knowledge that every user should know any way.
Sent from the stars...