I know Samsung does offer security updates for devices >2 years old. I have a Galaxy Note 4 that got 3 years of updates. They weren't monthly, but were fairly regular(1). It does appear that this is common for Samsung flagships, but probably differs depending on variant.