This is the biggest one for me. Anyone who has that data is capable of playing back the 0-days that affect android. How many android phones are kept out of date?

As other user mentioned, the Android ecosystem is like the Wild West. Given there's a report for 2.5B active devices, how many can be affected by such an attack?

1% would affect 25M devices, around the population of Australia. 10% - 250 million devices. 40% - 1 billion devices...