Most Android manufacturers support there smartphones only a year or two. There are only a few exceptions like the Google Pixel or the top models of Samsung. Since many devices older than two years are in use, many devices don't receive the latest security updates anymore. This is a pretty sad state from a security standpoint. So why didn't the Android Security Super-GAU didn't happen yet?