After doing some research on security it seems that Android's problem is overblown. The malware I've come across mostly stems from people downloading random apps from the web and then granting full privileges to that app. Which in turn does things with the permissions the person granted it.

That doesn't really seem to be a security hole as much as it is a user problem.

I guess it's simple to say Android is insecure, but it doesn't seem to be the case. Any more so than a rootable iOS device.

Am I mistaken? Are there reports of apps gaining root access?