As we all know, Android security is a mess. Google fixes security bugs, but it's a matter of luck whether your vendor or carrier decides to deploy the fix to your phone or tablet.
In the European Union, there is a mandatory 2-year guarantee for all goods: Faulty goods must be repaired, replaced or refunded if a defect which already existed on receipt of the goods is found at most 2 years after purchasing the good.
Has anyone every tried this w.r.t. security vulnerabilities? I.e., purchase a new, shrink-wrapped device (perhaps a cheap device that was released a few years ago but is still being sold) and then, after using it for about a year, force the trader to take it back because it no longer receives security updates?
On the one hand, all conditions for the 2-year guarantee should be satisfied:
- The device was bought less than 2 years ago,
- the defect was already present when the device was bought, and
- the device can no longer serve its intended purpose (surf the web without getting your device compromised, your passwords stolen and, thus, your bank account emptied).
On the other hand, I have never heard or read about such a case, so I might be missing something obvious...