The simplest attack that I can imagine is Google just removes the features that make the Pixel phone viable for this sort of OS. Then what?
This is a very good point, but it won't do anything to impact the security of older Pixels, and presumably some other company will step in to profit from the newly-opened market niche. Hopefully.