[..]constantly updated, but also a limited number of hardware variants and software configurations.[..]
Are we talking about the same Android? You seem to have enumerated where android is the weakest; poor vendor update frequency, many varied hardware platforms, a plethora of vendor or user customized software configurations.
New crypt. See /usr/news/crypt.