All news items I have read ref Android seem to point to malware being the main problem . If your granddaughter only downloads apps from google play , she should be pretty safe . I personally wont use Android , as too many apps ask or take permission for stuff they don't need . ie contact lists . Perhaps a good idea would be to get her to read the advise pages on security , as a bit of knowledge combined with some common sensce will avoid many of the pitfalls .
How to get Windows 10 now: how to download and install Windows 10 even if GWX.exe is missing