If you look at the architecture for IOS extensions vs the architecture for Android Intentions, the IOS architecture looks a lot closer to be Privacy By Design. Not saying that IOS/Apple is a silver bullet, but deliverable privacy and security more likely to be doable with its approach.
Lesson being that it's possible to build a secure and privacy protective system & then add features whereas doing features first and bolting on security and privacy is much more difficult.