Some enterprising lawyer could look for people whose phones or accounts get hacked as a direct result of manufacturer-provided security patches not integrated i

Some enterprising lawyer could look for people whose phones or accounts get hacked as a direct result of manufacturer-provided security patches not integrated in time by Android core, the device maker, or the carrier. Then start a class-action lawsuit, with the stated outcome of forcing carriers to allow, at no cost to all users of no-longer-security-patched phones still being paid off on their plan, a switch to newer phone that are still being patched. While it'd likely result in a settlement, this may be a way to get the ball rolling, and turning our multi-year outrage into actual (if underwhelming) results.