It has drastically lower privacy and security. That includes apps getting far more data, VPN leaks, many serious privacy and security vulnerabilities being unpatched for many more months or years and not having greatly improved exploit protections mainly protected against apps and remote attacks. Protecting against data extraction is a small part of where security matters and there's much more to privacy than protecting against security vulnerabilities.

You're conflating local data extraction with security vulnerabilities remotely exploitable via WhatsApp or RCE du jour. Don't.