Actually checking how old the software is, would be probably not such a bad idea. But it would force giggle partners to provide security updates.

The EU will do that in the next years (effectively from 2025 for 5 years I seen to remember), but Google could do that too. They don't.