Android and ios update cycles are different because on android most components are upgradable without OS update. Most notably the browsers get updates longer than 7 years and they tend to be the biggest security concern.