> To which trusted source can I initiate a remote update?
Probably you can get some sort of AOSP build running on it, and patch it yourself to get at least somewhat up-to-date components.
Probably you can get some sort of AOSP build running on it, and patch it yourself to get at least somewhat up-to-date components.
This is because the device drivers are compiled for that kernel version with no open source alternative.
So whilst it might be running a newer version of Android. It isn't like installing Ubuntu 20.04 on a 10 year old laptop.