The OS is only part of the attack surface and part of the security features of a smartphone.