Phones don't get security updates for 7 years. It's irresponsible to repair such old phones, prolonging their use.
Phones should be required to get (at least) security updates for (at least) the same period as they are covered by repairability requirements.