Thats a long time for a critical security patch to land (like this one [0], although it looks like it has been fixed now, at least in their alpha channel, which is annoying (not their fault) because we really need this patch).

[0] https://news.ycombinator.com/item?id=4974151

That link has nothing to do with android or google or graphene or security patches whatsoever.