I came to a similar conclusion after looking into rm2 and trying one of the similar Boox tablets. They may run android, but security and OS updates seems to be a low priority for these eink tablets.

I ended up getting an iPad Air with the pencil, and one of those matte screen protectors. The OS may be locked down, but I can still choose from a wide variety of note apps/clouds (currently use GoodNotes), and security is obviously top notch.