This is a nice summing up of the main Android security issue: “Platform Fragmentation”. In other words, if nobody is responsible, the user is going to suffer (and your phone will never get any security update).