Are you aware of Pegasus? 0 interaction required. The hackers just need your phone number and for your phone to receive a text. They can then go and remove the payload text since they have full access to your phone leaving you with zero trace of being infected.
This is obviously not a worry for the average person but to say iOS and Android do not have a meaningful malware concern is just false.
Those ones are covered by a new rule that prohibits unsavory behaviours