I found this link on the PRIV forums on crackberry.com. FCC Launches Inquiry into Mobile Device Security Updates.
Here's an excerpt from one of the documents on the page
"Consumers may be left unprotected, for long periods of time or even indefinitely, by any delays inpatching vulnerabilities once they are discovered. To date, operating system providers, original equipment manufacturers, and mobile service providers have responded to address vulnerabilities as they arise. There are, however, significant delays in delivering patches to actual devices—and
that older devices may never be patched."
We could tweet @FCC and let them know our frustrations.
Just a thought