Quadrooter: New Vulnerabilities Affecting Over 900M Android Devices [pdf]
The FCC absolutely must clamp down on EOL policies and security updates for phones.  It's a telecom infrastructure issue.  Sure it places a burden on companies like Google and Verizon, but they're the ones who deserve to carry that burden -- not consumers.  The secure lifetime of a device that is hundreds of dollars should not be only 2-3 years.  That leaves a dramatic number of consumers fully exposed and eliminates the secondary market for used technology.Edit: Furthermore, if the companies are going to lock down devices and driver blobs so nobody else can fix them, all the more reason that the security of the device is their absolute responsibility.