[deleted] and I think that if there's one device you shouldn't buy, it's the iPhone.
I think it depends on your usage and threat model. Average Joe's data is probably more secure on an iphone than on a cheap android phone. There are many more incidents with malware infested apps in the play store compared to Apple's App store. In my experience, old people or less tech savvy people prefer the UX of an iphone. Things just work there, for the better or worse, if you happen to have more than one apple device in your household (Mac, TV, iPad) - AirDrop, screen syncing, sharing wifi password. Almost no configuration required.
Sure, then there are the iMessge zero-clicks so disabling that would mitigate the risk.
But as with most other online devices, if you keep your sanity and find the strength to resist the urge to play the umpteenth reiteration of some dumbed down mobile game or camera app, I think the average user is golden even with an iphone.