https://www.androidauthority.com/auto-update-apps-google-pla...
Then, on a worldwide scale, you can see that a lot of people are running unsupported Android versions.
https://gs.statcounter.com/os-version-market-share/android
Yes, there is no guarantee they a web app is more secure or up to date but tge likelyhood is far greater as it's a developer's responsibility and not the end consumer.
Sounds like it would be higher than I expect, but I still claim it can not be more than fractions of a percent. Actively toggling a setting like is definitely esoteric behaviour even for a power user, never mind the large masses of smartphone users.
Unsupported Android version is not related to old app versions, Google Play will still work.
I do grant that web is more likely to be up to date than an app. Me claiming that it depends on the developer was just being pedantic: technically it depends on the developers and their release practices, but likely it's the web version that is more up to date.