> There is no good reason OEMs can't be running test builds of ROMs with security patches within hours

That sounds like it costs money and doesn’t net the mfg new sales.

Trying to do software well at hardware centric companies is hard. Mostly for this reasoning.