The unfortunate reality is that most users don't care for security. Google can continue to get away with only 3 years support of security updates. Another reason why I am considering going back to an iPhone.
I find it very concerning that I can't download an update to fix this particular vulnerability without a help from the manufacturer of my device. PNG has nothing to do with drivers, after all. And yet, I doubt I'm going to get pwned over this one. Mitigations to the rescue.