“While Google patches these vulnerabilities, OEMs and carriers control when it reaches the device in someone’s pocket. In ...