850 million at risk
And 850 million people who haven't had a problem.
It may be "...yet" but it is likely one of the reasons people are resigned to whatever risk there actually is. And I doubt many of those 850 million could upgrade their Android version if they wanted to.