FTC Investigating Android Patching Practices
It’s a known truth that most Android vulnerabilities don’t get patched. It’s not Google’s fault. It releases the patches, but the phone carriers don’t push them down to their smartphone users.
I think this is a good thing. This is a long-existing market failure, and a place where we need government regulation to make us all more secure.