Aren’t there many proprietary blobs starting at the SIM card level, which are black boxes that could contain malicious code? I can’t trust Android phones “completely” because I’m not sure just how much of it is truly open source - so iPhone is a more convenient alternative of the same thing with at least lip service to privacy and security...