You can replace the OS on most Android devices.

Specifically- devices made by Google have been unlocked allowing replacement of the software.

You still have to put together a working kernel and drivers, environment, etc.

Not much stopping folks from doing that though.

GrapheneOS, Ubuntu, and others have made headway for some devices.

Each device potentially uses different hardware implementation and features.

Or, maybe writing firmware and code that doesn’t make money is the opposite of profit.

Where is the incentive to write code that reduces security and costs money they won’t recover ?

This is a crowdstrike issue specifically related to the falcon sensor. Happens to affect only windows hosts.