To be fair, Loapi hasn't appeared in the Google Play store. But plenty of other malware strains have. Google really is lagging when it comes to policing its own app market, and I say that as a proud Android user.
Regarding iPhones, I would have recommended the iPhone SE, which at $350 unlocked was the best smartphone bargain around. But word is that the latest iOS 11 update has rendered it (and the rest of the iPhone 6s generation) kind of useless. There may be an upgraded SE model coming this winter, though.