If you are implying that any system with auto updates could swap in malicious software I'll buy that. But you pointed out iOS and Android specifically. Most (all?) OS have auto update features and by enabling them you open yourself up to this vector.