I'm all for prompt patching of security issues, but I think Google is playing dirty with OS vendors. Releasing an OS into production is not the same level of effort as updating a hosted service.
Meanwhile, when it comes to their own OS issues, they just make obsolete the versions/features they no longer want to support.[0]