StageFright was patched on a LOT of devices that "no longer received updates". The concern with embedded web views is overrated, as Android actually updates those via Play Services now.

For all of the talk of how awful this is, actual exploits are almost unheard of.