This guy's point seems to be based around the patching method used to upgrade the firmware more than anything to do with the vulnerabilities themselves.
“They do a good job of repairing future releases, but I think a better patching system needs to be set up for Android.”
During Google IO 2010, Google stated that with Gingerbread they will be splitting many applications from the OS so that they will be updated through the Android Market separate to the OTA firmware updates. This is intended to help with fragmentation. There was no mention of the browser specifically, but it would be a prime candidate.
My guessing is this guy has seen this and thought "here's my chance". He hasn't said anything new and if the browser is separated in Gingerbread, then his point becomes invalid for Android at least. Does Safari on the iPhone update separate to iOS? (genuine non-iPhone-user question, not flame bait.)
"The bigger point, Keith said, is that most users have no idea their devices are vulnerable to bugs that were patched long ago on other platforms."
Like most Windows users then? (Had to get the boot in somewhere.)