Android is fragmented (though that is changing slowly), which means it's much harder to port and validate a single exploit chain to work on many Android phones.