It's not about Apple being evil, it's the nature of computer security today. However they could backport security fixes, if they wanted to leave a period of time where people have a meaningful choice between freshness and stability.
So even patching is not forcing anyone.
There's no iOS 7.1.3 that would fix any of the many vulnerabilities fixed in iOS 8: http://support.apple.com/kb/HT6441 , and it's likely there won't ever be.
For example, CVE-2014-4377 ("Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution") or any of the WebKit vulnerabilities are a pretty big deal.
They could also choose to run comparable software that does not require ios8 and not upgrade at all.