They need several years of updates for firmware, baseband radios etc from the OEM, They also need a robust secure element, this is why spec requirements are as they are. Mainly for the end user’s security & privacy can’t have privacy without actual security.