Samsung actually has a decent track record of updating their software -- my family's Galaxy S5s on T-Mobile (purchased 2014) are actually still receiving security updates, despite being on Marshmallow API level.
Honestly though, I think all of the company use the same strategy. Only the flagship line is the one getting extended support for update
They literally didn't update note tablets once!