I found this surprising as well. There is some information in this article:<p><a href="https:&#x2F;&#x2F;itsecuritything.com&#x2F;google-nexus-6p-security-teardown&#x2F;" rel="nofollow">https:&#x2F;&#x2F;itsecuritything.com&#x2F;google-nexus-6p-security-teardow...</a><p>To be honest, I think for non-Nexus phones, the situation is pretty bad. Even if a device vendor would not cooperate, security updates are so glacial (if they happen at all) that a state actor probably won&#x27;t have much trouble finding attack vectors.<p>(I am pretty frustrated by the lack of updates for my Moto X. Motorola used to be pretty good at is. Now I have Marshmallow, but they didn&#x27;t roll out any security updates beyond November. It seems that they just want to tick off the Marshmallow box and that&#x27;s it.)