Actual security / privacy person here. The iOS ecosystem is much much much worse than people currently think of it as. This is primarily due to adware SDKs and in-app browsers that Apple has done absolutely nothing to address.
This depends on if you count adware as malware, and where you draw the line of spyware.
For me personally, I think both the App Store and Play Store are mostly malware. Ironically, third party stores like f-droid have the least amount of malware.