Huge fan of LineageOS, but this isn't a great comparison. While Google probably found out about Krack earlier than the Lineage team. They aren't going to break their normal monthly security release schedule for it.

Now that's hardly a fair comparison. Huge difference between a fledgeling project and a massive ecosystem that is Android.

so, who will be hurt if Google releases this time a non monthly security update? E.g. I don't see any sysadmin related tasks to this. Look e.g. on a big competitor: Apple is releasing whenever there is something new/important. Why cannot Google go the same way. What's so wrong when there is a October 17th security update?

I mean... it takes anyway a couple of months until many vendors will implement the upcoming November patch.