Good question, but I thought all updates, including security patches, have to run through both the manufacturer and the carrier. Since the September patch has only hit Nexus, Pixel, and one or two other devices so far, and only within the last week or so, I think getting an August patch in a little more than a month from release by Google is still pretty good.