If they are 10 (11?) months old on major systems version jumps, the fuck are they doing for monthly security patches?!
Wait, what does one have to do with the other? When a new Android version comes out it doesn’t mean that the previous one stops getting security fixes. You can stay on a previous version and still be up to date on security.