This is unfortunately true, but it's not Google's fault, but the device manufacturers themselves have the biggest responsibility, because they have a very slow release of Google updates on their phones and many users wait for months to get updates. Reason for that lies in fact that each of them (Samsung, Huawei...) need to adjust update for each of their model separately and then release it from top models down by regions/countries. I get my Android 10 update in less than 2 months after release on my Huawei which is last year top model, but some models is still waiting that update.
Therefore, it should definitely be acknowledged that all devices running Android OS are at a very disadvantage in terms of security updates, they are too slow to deliver them, which leaves enough room for hackers to exploit all the vulnerabilities. I read in article that one of advices is to use antivirus on your smartphone, which is in my opinion good move, despite the fact that most will reject it because such programs slow down the device (which is true if you don't have enough RAM), and because of the cost of such programs.
In short, don't use crypto on your smartphone unless you have a smartphone running at least Android 9 (latest version 10), and if you are in the habit of surfing suspicious sites and download apps from unreliable sources.