What if that OEM stops giving them patches?

Also, if they're asking an OEM to release the patches, why can't they become an OEM to do that?