As it came to light during previous instances: there are different types of updates deployed by the carries and device makers that vary in urgency, one type is 'critical' updates that get deployed quickly, all the phones don't have to be running the latest version to be patched.