At least in the past Android wouldn't allow security updates without having the user take a bunch of steps each time. Users couldn't just add a trusted authority permanently. Google also allegedly colluded with phone maker storefronts to keep them from working out deals with Epic.