I think GP meant two other devices (not from asus) where the vendor doesn't patch and the bootloader is locked.
You're correct. My other phones were from my wireless carrier, and didn't support unlocking the bootloader, so I had to keep upgrading (over a period of years.) I bought the Zenfone to try to break that cycle. The old devices still function, aside from being outside of vendor support (or in the case of one, incompatible with the carrier's network after infrastructure upgrades.)
even if it is different companies, not sure if it makes a difference... it just encourage bad practices.