Doesn't? It's already a much bigger problem than Windows XP. There are billions of Android devices shipped each year, and a miniscule proportion get updates. Even the best devices for updates only get them for a couple of years.
If this isn't a disaster bigger than Windows XP, it'll only be because most of the devices end up in landfill.
This is an absurd comparison. The number of devices running Gingerbread (which is 7 years old) is around 1% [1]. At the time when XP was 10 years old, its usage was much higher.
I understand that phones don't receive updates (I've had several myself), but practically speaking it only takes about 3-4 years for the world to move to new Android releases. As of today, over 50% of devices are Lollipop (3 years old) or newer, and over 75% are on Kitkat or newer (4 years old). I've been around long enough to remember the days when people were complaining that they would never be able to take advantage of Froyo. That has clearly not happened to us; Froyo is long dead and gone at this point (and it's worth noting that Froyo is about the right age to compare to XP at the time of its deprecation, and has nowhere near the usage).
The Android update situation is definitely bad for security, but the situation is simply not in the same class as Windows XP. I'm pretty sure up until the point where Microsoft forceably deprecated XP, there were still new computers (especially in places like China) being sold with it. With Android, old phones become obsolete and get replaced by new ones, and manufacturers do adopt the new OS versions for their new phones which causes updates to make their way to users (albiet slowly). I don't think you could buy a new phone (even in China) with Froyo today.
Came to this thread wondering if the Firebase issue from earlier was going to spill over, but yes also hoping for some cool stuff as well and keep refreshing Twitter :)
