All parties that run Linux on these devices should be forced to mainline their kernel patches. The patchwork of shitty BSPs that both Google and Samsung have created were shipped, resulting in hundreds of millions of insecure, poorly supported devices that are actively used.

Look at what Armbian has done with these bespoke chips in spite of limited resources, had Google and Samsung put in a minor amount of effort, akin to what Sony has done, the Android landscape would have many more users running fully patched, slightly less buggy software today.