TFA said: "Otherwise, it risks having users (slowly but surely) switch to more secure platforms that do give them updates in a timely manner."
I'm curious what platforms those might be.
The only one I'm (slightly) familiar with at the moment is Replicant, which is an all-open port of Android - with support for a limitied - and (thus?) somewhat pricey (when even available)- handful of platforms.
("All-Open" being defined as "Functionality dependent on binary blobs we don't have open source replacements for is left out of the distribution. You might get it working by installing proprietary modules. But we think that's a bad idea / counterproductive / reduces incentive for people to MAKE open source replacements, so we don't recommend it or provide instructions." i.e. do a web search for somebody who figured out how to do it if you want, say, the front camera, WiFI, or Bluetooth to work and forget about GPS for now. (v4.2 on Samsung s3))
Now I think that's the right approach. And I'd love to see more support or help for the project.
But are there others? If so, what are they?