There's unfortunately slightly different issue here: if the phone vendor puts the OS on an user-replaceable SD card, then the UX quality and reliability of the device depends on the SD card vendor, which is a bad position to be in, given how much fraud is happening in this space.