This is one of the reasons I'm looking forward to the Purism Librem 5. Running essentially standard GNU/Linux with mainline kernel drivers for all the peripherals means you're not dependent on any one entity to provide security updates.