Separating security updates from general new feature updates would be the key for old phone updates but that is unlikely to happen.