Good. We don't put up with yearly security updates on any other operating system any more, so why should Android be any different?
An Android app that would list currently open security holes would be a great way to publicise this.
commitment to updates is the major point of difference between the vendors... it's a bloody farce, i'm going to get a better android upgrade path on the n900 from the good hackers at the nitdroid project then any customer* of multi-billion dollar trans nationals such as sony ericsson.
*with exception of nexus one owners
And a way to fix it would be for google to release an updater client so you could update an android phone without being pushed an update from your carrier.
This would be good. But to provide pressure for that to happen, I think we need visibility of currently known exploitable bugs.
Android is open. Completely open to install unwanted apps, decompile developer apps, and send user data to China. There's no bit of information that isn't open for abuse.