One large gaping problem with this information is about all the unpatchable android phones out there.

I think it's high time Google revisits how security updates can be rolled out to all phones that want to get them... This would be oodles better than relying on the mercy of hardware manufacturers, who are quite happy to leave older devices running archaic versions of android.