Android has partial sandboxing of applications and a whole bunch of different permission options as to limit to one function. To my understanding iOS limits you to the 1st party app store (without sideloading). I understand why limiting the available apps improves security, but that means you are locked into using a lot of proprietary closed-source apps (which sucks). Apple also requires the use of an Apple account, and I also don't think comparing default configs is worth much because to improve security/privacy I would look at the ceiling of what is possible to harden (I am refering to just basic settings, not dev stuff), as a default is for a general userbase.