Sorry but comparing NSO Group's state actor malware to the tens of thousands of Android malware campaigns targeting everyone's bank account is so completely bad-faith. Every single thing you point to on iOS is about 10000x worse on Android; even if you look straight to state actors, Cellebrite can crack almost every android ever, whereas iPhones take at least a few years and the latest models are almost always protected.

That's ignoring the fact that literally zero average consumers are even targeted by these groups, nor do they have any perception of it. The average person is worried about exactly one thing: common consumer malware.