To be exact, those aren't exploits of android itself, just the device it's running on.
Not much of a difference in the outcome, but i guess it doesn't defeat the argument of google having good platform
[1] https://www.ft.com/content/4da1117e-756c-11e9-be7d-6d846537a...