It’s a huge pain in the ass. Usually trips up the android safteynet drm and doesn’t give kernel updates because no one has access to the proprietary driver blobs which no longer work with new kernels.

You can often get android api updates like this but not any real security updates.