One could engineer phones differently so they would be more secure. Having some fallback option if a phone update fails, which I think is a reason why manufactu

One could engineer phones differently so they would be more secure. Having some fallback option if a phone update fails, which I think is a reason why manufacturers does not update. For example having a boot loader and two different flash areas. One primary area and one secondary then you tick tock boot between the different images. This how routers and CoreOS and XenServer does it. The kernel can be live patched as of Linux 4.0 It's either that or more open phones where the customers can install and maintain their own operating system. Android stock, Cyanogenmod, Ubuntu phone etc.