A large part of the problem is the phone vendors that refuse to provide Android security updates. Every time an Android exploit is found it is a bonanza for the malware creators who know even if the Android devs fix it and provide an update the users have no way to apply it. This is a clear example of why the tech industry needs to be regulated.
