Comment by andybak

This can be turned into a nice 'name and shame'. If someone could document currently shipping devices that are still vulnerable. Then everyone can tweet/blog/complain the hell out of it until OEMs and carriers start taking some responsibility.