One of the biggest problems of Android is the lack of timely updates on non-Google devices. Apart from Google’s range of Nexus and Pixel devices and those that are enrolled in the Android One Programme, all other Android manufacturers struggle to provide timely OS and security updates on their smartphones. Even though Google has made it easier for manufacturers to implement software updates on time through initiatives like Project Treble (supported on Android O and above), we still see device makers ignore updates once their devices become older and less popular.
Now, Google is trying yet another way to make Android smartphone and tablet manufacturers roll out security patches in a timely manner. According to documents obtained by The Verge, Google has now mandated at least two years of on-time security updates for all popular Android devices through a revised contract with manufacturers. Google defines popular devices as those that sell more than 100,000 units globally, which is easily true for most popular Android smartphones. The revised terms of the contract cover Android devices launched after January 31, 2018 with more than 100,000 users. From January 31, 2019, all devices identified as “security mandatory models” are contractually obligated to be updated and the security bulletin installed must not be older than 90 days. New devices that launch post January 31 must also launch with the same level of bug fix coverage.
Verge reports that the consequences of not following these conditions mentioned in the contract could give Google the liberty to withhold approval of future devices and delay or deny their release with Android onboard.
While these new terms appear in a licensing agreement for Android devices sold in the EU region, It is quite likely that Google will make this a global licensing policy. In fact, Google did hint at the same during a conversation with Digit at I/O earlier this year. When asked about Project Treble not picking up steam, Google’s VP Engineering (Android), Dave Burke, had said, “The thing about project treble is that it takes time, but it’s playing exactly as we expected. In Oreo, we spent all of this effort creating this very formal hardware interface and it meant every single team – like the media framework team, the graphics teams, locations, sensors – every team was affected. They all had to create this formal boundary. What it means is you were never going to see a benefit last year because, in some ways it’s more work for everyone. You will start seeing the benefits now. We’ve got a formal interface and lots of tests done and contracts enforced. Now, the silicon vendors are actually working with us. So Samsung semiconductor, Qualcomm and Mediatek are working in the same code base. So it just speeds it all up.”