>You could have a bug in a single binary at the kernel level, but instead of a tiny 1Kb diff patch you wait a year for a giant 1.2 GB vendor update that also contains a lot of other changes you have no interest in.
Security patches are not 1+ GB in size - no where close to it. You're referring to OS updates that completely replace the old OS.
Google distributes patches each month to OEM's 1 month before they're released. Some OEM's merge them into their code base and create a patch while others don't really care.
Security patches are not 1+ GB in size - no where close to it. You're referring to OS updates that completely replace the old OS.