Been using it for a few days now VERY impressed by it. Hopefully it stays strong for a few years.
Indeed, that is like rule number 1 on managed devices :). The requirements are really tight as in all system and app updates must be installed within 14/30 days of them being released as well, and if you do have an exception the update can not include any CVE patches.
Interesting but surely a bit of a pointless requirement as you can install apps from untrusted sources on Android? Unless this is blocked as part of the software?
There is something called Cyber Essentials Plus which means all devices that access company data must be up to date and be in support by the vendor - can be a very tricky road with Android BYOD devices! Luckily, more vendors are starting to list this and / or state a device will be guaranteed security updates for X amount of years. It's a very niche requirement for myself but sadly one I must respect. To clarify, this is still in support but only until around April next year so I will have to find a new device early next year if I want to continue using it as a mixed BYOD/personal device.