Android security/updates

[shobuddy]

I'm curious as to how Android updates/security works. For an OS such as Windows, Microsoft is constantly putting out security updates to fix vulnerabilities. Howcome Android does not need to do this? The only updates I hear about from Android are when they move to a new platform (gingerbread, froyo, etc.). I would imagine there are security vulnerabilities consistently being found in Android so shouldn't users be getting updates to fix these issues on a relatively regular basis?

Edit: I realize Windows is a much larger and complex OS but my question stands.

 

[anon(21022)]

Some security updates were included in the past along with the Market updates. But yeah overall, the security updates come with newer versions of Android... Which means any device not updated by manufacturers become a security liability; another reason not to trust manufacturers or carriers who abandon devices so quickly, and/or to love custom ROMs/bootloader unlocking, as well as Nexus phones

 

[Ricky Babalu]

Here are two examples.

1. An Update on Android Market Security - Official Google Mobile Blog

2. Google's Plugging That Potential Android Personal Data Leakage Right Now