There are many vendors that are even worse than /e/OS in terms of updates. This is one of several reasons why Play Integrity is a farce, it has very little to do with security when vendors can be months late with critical vulnerabilities and still get to pass Play Integrity.
Basically anything that is not GrapheneOS, Pixel, or Samsung is in a deplorable state (Samsung not only rolls out security patches during the embargo period, they also do QPR2s).
There are many vendors that are even worse than /e/OS in terms of updates. This is one of several reasons why Play Integrity is a farce, it has very little to do with security when vendors can be months late with critical vulnerabilities and still get to pass Play Integrity.
Basically anything that is not GrapheneOS, Pixel, or Samsung is in a deplorable state (Samsung not only rolls out security patches during the embargo period, they also do QPR2s).