The thing that is so disappointing to me about the whole Android infrastructure is how poorly manufacturers do at keeping them updated. I have a Samsung Note 8. It shipped with Jelly Bean. There was a (late) update to KitKat. Since then, nothing. No lollipop at all so far, even though Google has put out 2 separate releases of that, and now Marshmallow appears. This wasn't a low end $100 tablet, yet Samsung appears to not really be concerned about all the threats out there for these devices.
It would seem that the only solution to keeping these tablets updated is to root them.