September security bulletin had been released, and updated code pushed by Google. Let's see how long it takes for us to get it!
I still think there should be a beta programme for Nokia phones, one where the person is warned beforehand and opts in. By doing this they should get the update right away and bypass any carrier restrictions. Microsoft did this with Widows Phone Insider, so can be done. At it's opt in you accept responsibility for any bs carrier restriction.