Let's assume that you are correct. I am now holding a perfectly-fine Samsung Note 3, purchased new in 2013 and has never had a broken screen. To which trusted source can I initiate a remote update?
Probably you can get some sort of AOSP build running on it, and patch it yourself to get at least somewhat up-to-date components.
This is because the device drivers are compiled for that kernel version with no open source alternative.
So whilst it might be running a newer version of Android. It isn't like installing Ubuntu 20.04 on a 10 year old laptop.