Google’s solution to IoT security is to do all the updates itself, for free.

Source: Android Things 1.0 launches, Google promises 3 years of updates for every device