https://www.cnet.com/news/google-android-regular-security-page-oem-contract/

There's been an awful lot of hacks in the news recently, and it's always frustrating to see my oh-so-personal phone (in my case, a Motorola Moto Z2 Play) go months without a patch. Google is pretty quick to issue them, but it takes longer for OEMs like Motorola and Samsung to get with the program, and I've definitely noticed some major lapses.

But at Google I/O 2018 this past week, the company's head of Android security reportedly said that OEMs will now be contractually obligated to issue regular security patches.