There's simply no choice with hardware now if someone wants it to meet some secure baseline.

No other vendor makes secure android hardware.