In general, you can really only count on having supported Nexus devices patched in a timely fashion. This is the reason that my employer only allows corporate access from Android phones when they are Nexuses.