The other OEMs are getting patches on time, it's just that Google aren't releasing major releases to the AOSP monthly or on time. They moved it to quarterly to make things easier for OEMs and they get access to those versions early before the public do. We got the early access for security patches but potentially looking at early access for more.
The code is embargoed, but the compiled binaries are not...