Affiliate links on Android Authority may earn us a commission.Learn more.
Android phones with missed security updates still ‘more secure’ than average PC
July 04, 2025
Android phones lacking a fewsecurity updatesare still more secure than your average Windows machine, a security researcher and the co-author of a study says.
The statement comes aftera studyby Security Research Labs (SRL), which found that manyAndroid brandswere far behind on updates. The study, first reported byWired, also found that some vendors were lying about the last applied update.
The researchers discovered thatZTEandTCLwere the worst offenders when it came to dubious claims of being up-to-date.
“Most patching gaps are probably the result of genuine difficulties to keep track of all necessary patches in Android, theLinuxkernel, the chipset, and hardware drivers,” SRL founder and study co-author Karsten Nohl toldAndroid Authorityin an email. “Only in (a) few cases have we caught vendors simply stating wrong patch dates, and even less so recently.”
SRL has updated itsSnoopSnitchapp to show authentic patch information for your phone, and will issue a bug-squashing release at the end of the week, Nohl explains.
Missing security updates might not hurt
Aside from downloading the app, what else can consumers do if they don’t have the latest security updates?
“Single missing patches are not by themselves a cause for concern, since most Android hacks require a chain of multiple bugs,” Nohl elaborates. “If the patch gap is very large, a security-conscious user may want to switch to a better-patched phone.”
Nevertheless, the SRL founder reckons that Android device owners can take solace in thesecurity measureson their phone.
“We have not seen any large-scale hacking attacks on Android, and hopefully never will. Each phone has a number of security barriers and each missing patch usually affects only one of them. Consumers can take comfort in the thought that an Android phone with a few patch gaps is still more secure than the average Windows computer.”
The sheer number of phone models means it’s no surprise that vendors are struggling to maintain updates, Nohl notes. “Simplification of the model jungle is a prerequisite for gap-free patching in my opinion.”
If you’ve got a super-old or ultra-budget Android device that hasn’t received security updates in a long time, you’re looking at more than a few patch gaps. So you probably want to upgrade your phone or enable more security options.
Thank you for being part of our community. Read ourComment Policybefore posting.
