Feel free to correct me if I interpreting this wrong, but I believe this is an area that Android is better in.
iOS 12.5.6 patches notes indicate this is merely an update to WebKit. The latest Android Webview, which coincidentally also released today, supports way back to Android 6.0. It is half the download size, gets day-1 patches, and doesn’t require a OS level reboot to install.
To further put this into context: the Nexus 5 (2013) still supports the latest web browser security patches. Same as iOS 12.5.6 running on an iPhone 5s (2013). But unlike the iPhone it didn’t forego a year of browser updates to accumulate security vulnerabilities.