As I said elsewhere in the thread, vendors don't have to release source for drivers (kernel modules); AFAIK every Android phone uses proprietary GPU drivers at least. So even if a vendor released all the source that they're required to release, that may not be enough to create a custom ROM with a future version of Android.