Android for business use is a mess for security & updates. There's no cohesiveness between brands. I make anyone who runs an Android that I support run paid copies of Malwarebytes & Glasswire. For corporate use, I don't support Android at all. I think they've got a lot of cool stuff going on, but professionally, I need things to work & be secure 100% of the time so that I can move on with my day because I have a million things to do. It's not impossible to manage Androids well, especially with a good MDM, but it opens the door to more risk.
A big part of it is also time-related. When I got into IT, I was extremely idealistic. I wanted to bring open-source to the world...I quickly learned that time really IS money, because they print more money every day, but I could only physically work so many hours a week, and being the support person for business equipment that had no paid support contracts with someone you could call to fix equipment ASAP & had to monkey around with a Linux solution for hours meant downtime. Some of the shops I've worked at lose tens of thousands of dollars an hour when things don't work, so wasting time having to fix things & having to figure out security policies across brands, devices, versions, etc. isn't idea.
Nothing against Android. Their foldable phones are amazing & I love the round watch faces. But for business use, iPhones are locked-down appliances that have a great track record for "just working", which I personally really appreciate!