Fair point. For android, choosing a phone from https://wiki.lineageos.org/devices/ or https://www.replicant.us/supported-devices.php helps getting security updates for longer.