Nope nope nope and nope.
I've always said neither android nor ios are secure. The apple fanbois can't withhold themselves from screaming bloody murder at this statement.
So crying "but android"is no defense. I'd also note, just like on my laptop and desktop, I run a Security/AV app on my android devices (Lookout).
AFAIK shellshock does not affect either iOS or OS X (in its default config).
This exploit has existed for the past year, so saying "but iOS8" is not a defense either. All iOS8 is is a message from apple in the form of an ""oops"". How do you know your device has not been compromised? Does the iOS upgrade re-validate the security of your i-device?