From my experience, Apple prioritize recent iOS versions when issuing security fixes. Affected legacy iOS versions will get them too, just later. The previous security update landed on my old iPhone one or two weeks later than on the newer one.