I've covered that in the second part of my comment, even if you deliberately exclude GrapheneOS (not sure why you would as it's used by high profile targets), Apple still isn't #1
I can't help but feel you're intentionally missing the point. An iPhone itself isn't secure without iOS, iOS is what supplies the limitations
Graphene is iOS
The OS is only part of the attack surface and part of the security features of a smartphone.