I believe the timely security patch issue will be resolved with the Motorola phones due to the OEM partnership.

Long term in the future, surely the open source community forks AOSP itself and maintains it. The worst option would be giving up and trying to focus on Linux (desktop) imo.