This may not be entirely true if you got your phone through Verizon. They control the release of code to phones under their control. I expect them to release it once they get it but they still vet the code.
Per the attached: http://motherboard.vice.com/read/goodbye-android?utm_Source=vicefbus, Google has prepared patches and sent them to manufacturers, so the question is, as it often is, when can we expect the patch from Verizon?
I too am waiting for guidance. Verizon please take note - and I'm sure someone there is watching this and other threads on the subject: If this breaks bad and the phones of thousands & thousands of customers wind up being hacked because you dragged your feet and did nothing about a threat your developers have known about since April the press coverage will not be good to your company image.