Re: I don't know about this
This really is another case of having no friends. The G has tried desperately (& failed) to get phone manufacturers & operators to issue critical security updates. From a security standpoint, you might consider cell phones to be the first IoT devices.
And since we know that 99.9% of users won't do the updates themselves without at least a push notification from _somebody_, what do you do?
It's too early to get this depressed.