>Based on the artificial delays Google introduces into the Android patching process, on the general crappiness of mobile firmware and the sleaziness of major mobile chipset vendors, I think it's safe to assume that even if you are supposedly getting updates, there are unpatched zero-day vulnerabilities in them.
Maybe if you include third party android OEMs like samsung, but google pixels are as up to date as you can get.
Maybe if you include third party android OEMs like samsung, but google pixels are as up to date as you can get.