For a start, they could try to fix vulnerabilities in Jelly Bean's webview[1] and urge manufacturers and carriers to push updates to their phones, since 46% of

For a start, they could try to fix vulnerabilities in Jelly Bean's webview[1] and urge manufacturers and carriers to push updates to their phones, since 46% of the market is apparently still Jelly Bean[2] Of course, it's an uphill battle with the manufacturers/carriers. But as long as Google is not applying fixes to Jelly Bean, the manufacturers can always blame Google. [1] http://www.androidpolice.com/2015/01/23/google-issues-official-response-concerns-jelly-bean-webview-security/ http://www.androidpolice.com/2015/01/23/google-issues-offici... [2] https://developer.android.com/about/dashboards/index.html https://developer.android.com/about/dashboards/index.html