If you care about personal privacy and security of your friends and family, you should discourage them from using Android.
Of course, this is meaningless without context. Privacy from who? Security from what? What's the perceived threat we're trying to protect against? Everything is a tradeoff. To absolutely protect your privacy, you must never be seen in public or interact with any other party in any way.
- Worried about Google? Android is bad. Google collects your data.
- Worried about the government? Since Google must obey warrants for your data, Android is bad.
- Worried about malicious third parties? Since Google has failed to patch even the Pixel line for KRACK until the December update... yeah, Android is bad. And malware through the Play Store that hits large numbers of devices is quite common.
To be clear: I greatly dislike iPhones. But Apple controls their store with a quality approval methodology, they patch all of the devices on their platform promptly going back a number of years, their business model is not built around data mining, and their privacy features have frustrated and irritated the government.
I dislike the iPhone, but if you want privacy and security, you should get an iPhone.