Well android patching after 3 years is pretty new thing compared to Apple policy. Apple was and is keeping security updates for very long time with major updates on top of that for iOS. Not knowing someone does not mean they will not be hacked or already has not been by downloading some app from the store.