When people discuss android security issues its mostly about the guy who installed random app from gods know where and got into trouble
Project Zero people have worked very hard to harden the core system. That doesn't completely eliminate 0days but makes finding them much harder.