All supported devices receive monthly security updates. Select devices support incremental updates for smaller update downloads. DivestOS however cannot and does not include all ASB patches as detailed here.
The Mulch hardened Chromium WebView is included with features like control-flow integrity and network state partitioning enabled. Furthermore Mulch is updated independently of the system image via an F-Droid repository for rapid security updates.
We created Hypatia, the first ever open source real-time malware scanner for Android. Backed by the standard and independent ClamAV signatures, it can detect over 450,000 Android-related malware signatures.