If google were more worried about security and less about prying, then they'd come up with a manufacturer/carrier agnostic method to apply security updates themselves.
I can't be bothered to root my mobile just for fun (these days; years ago I'd probably do it for the lulz) but I really would like something newer than android 5.0 on my S5 please.