The software industry has learned a lot about a security and exploits, certainly.
The hardware industry, including embedded developers, well, not so much...
On the other hand, broadcom is more interesting to attack because there are so much more of them...
If you're not allowed to control and secure your phone yourself, the next best thing is to go with uncommon tech.
Security-by-obscurity seems to be back in fashion :(
I'm also avoiding broadcom as a "vote with my wallet"-type of punishment for being reckless with people's property. If enough people react similarly, broadcom will learn from its mistake. If not, at least I've done my part.