"Android's" track record? Are you sure you don't mean a particular manufacturer or OEM's track record? Because every company that makes Android phones does it differently. Here, Samsung delivered more than they promised:
https://www.aninews.in/news/tech/mobile/samsungs-55-years-ol...
It's not like Apple is delivering all security updates to these old phones either. This one looked pretty critical to them, as the article says it “may have been actively exploited”.