I feel your pain. I bought an XA Ultra less than a week ago. I have the latest build (36.0.X.2.109), but my Android Security Patch Update is still on September 2016. I reinstated the phone to original factory settings via Xperia Companion, then the phone updated again. I still have the same security issue. I then researched Google (Alphabet, Android - or what ever you want to call them these days), and they pointed out that it is not up to the carrier to roll out these updates as I have been told in the past, it's up to the manufacturer to do so based on security compliance with Android software, which are to be rolled out monthly. This being said, this is my first Sony Smartphone - I am not pleased with Sony. I could care less about Android N (7.0, 7.1) because I use this phone as a business line and I am concerned about receiving files from my clients to save to Google drive through the device and their information, and my own information for that matter, being compromised. Since anti-virus software is only a layer of protection and Android Updates are embedded into the OS, I find this very misleading for Sony to stick AVG Anti-virus software on the XA Ultra and call it 'secure'.
... View more