University of Cambridge researchers find that the Android ecosystem is a "market for lemons," with 87% of devices unpatched against at least one known critical vulnerability.