I found this surprising as well. There is some information in this article: https://itsecuritything.com/google-nexus-6p-security-teardown/ https://itsecurityth

I found this surprising as well. There is some information in this article: https://itsecuritything.com/google-nexus-6p-security-teardown/ https://itsecuritything.com/google-nexus-6p-security-teardow... To be honest, I think for non-Nexus phones, the situation is pretty bad. Even if a device vendor would not cooperate, security updates are so glacial (if they happen at all) that a state actor probably won't have much trouble finding attack vectors. (I am pretty frustrated by the lack of updates for my Moto X. Motorola used to be pretty good at is. Now I have Marshmallow, but they didn't roll out any security updates beyond November. It seems that they just want to tick off the Marshmallow box and that's it.)