If the attack can be done in both platforms I'm not clear on your point. By your logic Gmail, HN, and essentially every other site are infested with "malware" because some people get hacked with vulnerable passwords.

Meanwhile, in Android:

http://arstechnica.com/security/2014/05/your-android-phone-v...

> The malware prevents users from accessing the home screen of their phones, making it impossible to use most other apps installed on the phone.

Do that on an unjailbroken iPhone and we'll talk.