I wouldn't say that is fair in that very few people can use that mode, so the net security win is minor and there exist hyperlocked down Android versions for years on the open market. A friend of mine even worked on one.

This space is murky at the top end.

The Zerodium payout offering is a rough proxy, but for 99.99% of consumers the security win for a iPhone are mostly about how they don't have to think about the manufacturer (tell your tech illiterate friend to buy an iPhone is easier than saying "Android but only Google or XYZ manufacturer") and how the privacy differential helps out a bit.

Also, plenty of people can't enable crazy hyper secure mode without bleeding information that they've enabled it. So this isn't as helpful as it may seem.