You're deliberately ignoring the constant security updates and patches Google is pushing, both monthly (https://source.android.com/security/bulletin/) and as part of OS updates: (https://android-developers.googleblog.com/2017/12/double-stu...).