Of course, all device that has internet access are vulnerable, but androids dont get malware as much and as severe as desktop/laptops.
I agree with you in one part, but we should not generalize when it comes to security and different devices/operating systems. Although the average user of a desktop computer will pick up a virus/malware much sooner due to the habit of downloading torrents or cracked software, it should be recognized that desktop computers still have some kind of protection, unlike smartphones, where users almost never use AV or a firewall.
In addition, smartphones based on Android are often very quickly left without support in the form of security patches, which opens up a lot of space for attacks through various vulnerabilities. My smartphone, which is only 3 years old and was one of the flagships in its time, received the last update about 10 months ago, and the question is whether it will ever receive any updates again - and I personally consider it a greater risk than Windows 10, which is despite all the flaws still regularly updated.