@phillaholic carriers have to “approve” updates; Google, Samsung, or whoever is your vendor can’t actually push an update because the carrier must sign it with their key. Was it Google’s fault for the vuln? Yeah. Was it AT&T’s fault for your update to take 1 week longer to roll out to you? Yeah.
You see that as the carrier waiting too long, I see it as Google having 90 days and waiting until the last minute. Regardless, Google allowing a third party to handle is a defective design.
@phillaholic carriers have to “approve” updates; Google, Samsung, or whoever is your vendor can’t actually push an update because the carrier must sign it with their key. Was it Google’s fault for the vuln? Yeah. Was it AT&T’s fault for your update to take 1 week longer to roll out to you? Yeah.
You see that as the carrier waiting too long, I see it as Google having 90 days and waiting until the last minute. Regardless, Google allowing a third party to handle is a defective design.