It's not Google's product any more than it's the Linux Foundation's product. Both are just organizations with software built into somebody else's product. Nexus phones purchased from Google are Google's product.

Separately, complaining that the vulnerabilities are unpatched in Android is a rubbish argument. They are fixed in the latest release.