" Nice, now they're selling security-compromised phones out of the box."
Nope, just being cheap. Instead of having phones made and pre loaded for them (expensive),
they buy generic models and have it "Branded" after the purchase (cheap).
As for all updates being able to be removed by the user, if you believe that then you might
just be interested in a slightly used Bridge I have for cheap.