Do you mean there's a Linux tree upstream of Google but downstream from Linus who have stopped work outside of Google control?
Qualcomm stops supporting their processors after a few years, usually three. They can make more money by selling new chips. Although I say this cynically, Qualcomm is actually the best third party vendor in this regard.
Edit: J"ust like their predecessors, they'll get Android security updates for three years, until October 2022." says Android Police.
Considering most people don't buy it at launch, this amounts to 2-ish years of support on average.