Not really a ‘Fairphone issue’ and more a general ‘smartphone issue’. The vast majority of OEMs don’t invest into security and just use random parts with mostly stock Android. Sometimes they actually make it worse by replacing AOSP apps with their less secure ones. Which sadly will become more common with Google abandoning AOSP.

Fairphone simply isn’t focused on security. Should that change? Are Fairphone users interested in improved security?