The only time I've seen malware on an Android device in person, it came from the Play store. I don't know if Apple is significantly better than Google at app review, but the methods described in the article would probably work for both.