Everything you said rings true, except the part about proprietary license. That's orthogonal to enforcing updates. That is a contractual issue, not a licensing issue.

Google could for instance not allow the manufacturer to connect to their Google Play store unless the manufacturer played ball.

But where does this all put us? We are OK with crap, insecure devices being shoved all over the markets? What can be done.