I still don’t really understand how a high-end device can “run out of updates” from a technical point of view. Crossing fingers this will be legislated one way or the other.
It’s not just about how many years of security updates, either. It’s about how promptly they roll security updates out.
2 years ago I bought a new Samsung phone that promised “three years of security updates” , but they only updated at 3 months intervals, with security patches up to 3 months old on release of the update. So after 18 months, it was up to 6 months behind on security patches.
That’s useless, as the black-hats have had 3 months plus to study Google security updates and find an exploit for any phones that are not up to date.
It’s put me off buying any Android phone again, as Samsung are supposed to be better at updates than many others.
