[beal]

What's more likely, Google break their commitment or they provide extra patches past their commitment.

[mschuster91]

In case of doubt you can always replace the OS with whatever Linux distribution you choose, which only leaves closed-source driver/fw blobs - but that problem is shared with every other general-purpose computer these days.