> all pre-Treble devices are still doomed The only devices that are doomed are those that: A. have no reasonable support for third party firmware B. have no u

> all pre-Treble devices are still doomed The only devices that are doomed are those that: A. have no reasonable support for third party firmware B. have no user base or community to maintain security The Galaxy S series since the S3, for example, is unlikely to ever stop getting some degree of support from community ROMs. Of course, those community developments don't have the resources of the OEM - they can't fix the proprietary parts that break, and security hinges on the willingness of volunteers to merge patches, which they don't always do. I don't think its that black and white, though. Plenty of "supported" devices get updates and ignore security vulnerabilities. Companies can and will stop updating arbitrarily, and you have no way to know who is actually looking for vulnerabilities to fix. All you get is a set of known exploits elsewhere and the means you can test them yourself on your own devices, or someone else did and you already know unpatched vulnerabilities on your end.