There's about 5% of commits made by people with e-mail domain different than google.com, android.com or chromium.org (6% if you count the last one too).
Do you get to see the code of yet unreleased versions of Android? Sure, they do accept some patches, but "developed in the open" doesn't seem to describe their development model.