Why updating Android without vendor help is a nightmare

Although Google releases updated firmware when there are major security issues, mobile users have to wait until their vendor uses the fixes to create new firmware and make it available. This rarely happens and creates something of a security nightmare. Creating and releasing new firmware with security fixes incorporated is a costly and lengthy exercise; a company need specialised staff and also needs to carry out testing before release. Given that lots of companies which have Android devices are small entities, they tend to avoid issuing updates, concentrating instead on the next generation of their device to keep up with the competition.