Compounding the issue, maybe not for Google's devices but certainly others', is locking the bootloader so you can't even install an aftermarket ROM derived from open-source projects that are up to date security-wise. I won't name names, but one particularly egregious offender's initials are VZW.