I don’t really see how delaying patches makes android any more secure than a monthly release.

Sure, it’s probably a tradeoff between the time it takes to ship security patches and might help some vendors to at least ship quaterly updates, but … it keeps known vulnerabilities unpatched for up to three months.