Actually for us it's a business concern. We were evaluating whether or not to allow Android device to connect to our corporate intranet and decided against it for that very reason. Not due to development related fragmentation issues, but rather OS fragmentation that makes security updates and vulnerabilities much more difficult to track and to resolve via updates. With vendors still pushing out 1.5, our corporate security was hesitant to endorse an OS with known vulnerabilities and no timely updates from the handset vendors.
With the iPhone, we can force users to upgrade to the latest OS version, and give them a time window to comply. With Android, it's not that easy. Blindly cutting off a specific version of the OS due to some vulnerability could potentially flood our help desk with calls regarding connection failures. Not feasible.
I'm not trying to argumentative here at all, but I'm curious if this is just OS related, or hardware as well. If you're able to mandate users use an iPhone, would you have the same abilities if you standardized on one model of android to support? Knowing the updates available for this singular device would give you one path to manage as well I believe. Politics aside of trying to tell users which phone to buy... I'm just wondering if this would work.
Mater artium necessitas. [Necessity is the mother of invention].