Google: Protecting Android users from 0-Day attacks

At least in Jann's article it's indicated that the main Android kernel is regularly updated to LTS but that not everyone follows it. A bit of name-and-shame on some vendors might become really necessary when they knowingly skip fixes. Maybe it's time not to talk about "android exploit" but "$vendor exploit" so that someone internally asks "how can we avoid that bad publicity in the future?".