Maybe it's just a matter of how much effort people put into finding exploits on the two apps. If WhatsApp has many more (actual) users than Telegram, researching exploits on WhatsApp is more worth researching on WhatsApp than Telegram
A bit like how there's much more malware for Windows than there is for Linux
A bit like how there's much more malware for Windows than there is for Linux