I'm in the UK, and bought an original Pixel directly from Google. The bluetooth daemon would just crash for me rather than being exploitable. I just don't think I have a case - phone manufacturers don't promise security updates in perpetuity. I don't think it passes the test of a reasonable person being dissatisfied.