It because Android is actually less secure, the theory is that on android NSO have the ability to delete the traces of their infiltration whereas on Iphone they were unable to do that which is how they got caught.