It will take the loss of business to get Android phones updated
It will take the loss of business by phone makers and telecos to get Android phones updated
If Google and its customers (the call phone hardware companies and telecos) don't get with it ensuring that Android systems are promptly patched end-client companies will start requiring (maybe even providing) either iOS or Windows Phone on any bring-your-own devices allowed on the network.
Android OEMs and lazy telecos are probably the only hope MS has of getting Windows Phone to prosper.
But really, why would a teleco care what the OS is on the phone it is selling? Android, iOS, Windows Phone, they'll sell what the end-customer is willing to pay for. The profit is similar regardless.
Maybe Google should either give up on Android or make mandatory timely fixes to security vulnerabilities part of its license agreement.
But does Google make enough money off of Android to care? Or is it just a prestige "we make an OS" thing with them? Anyone here know for sure?