Re: data is all that matters ..
To make your data* even remotely secure, the most important component is not your phone or its OS. It's you. The easiest device to hack is a person. And you have to get pretty well-educated on how breaches actually happen just to understand how and why your OS and anti-malware tools aren't enough. At that point, you are ready to start learning how to keep your stuff secure.
* I assume you mean your sensitive information like IP address, email address, name, physical address, phone number, bank/cc account numbers, and so on.