It's 3 years of security updates for Pixel and Nexus phones.
The Nexus 5 was already dropped in October 2015, having been released in October 2013.
Same with the Nexus 6 (it was dropped yesterday, being 2 years old).
It’s always been 18-24 months of updates max, and only if you buy on release day. https://support.google.com/nexus/answer/4457705#nexus_device...
> Nexus devices get security patches for at least 3 years from when the device first became available, or at least 18 months from when the Google Store last sold the device, whichever is longer.
Google is still releasing security patches for Nexus 5
http://www.androidpolice.com/2016/08/01/august-security-patc...
The most recent one for Nexus 5 aka Hammerhead was this month: M4B30X, Oct 2016
https://developers.google.com/android/images
You're mistaking the major version releases (6.x.x vs 7 x.x) with security patches, they are not promising major updates here only security patches for 6.x.x.
Which is illegal, EU law demands 24 months from when it was lost sold anyway.
> they are not promising major updates
That’s another issue, many security features are only added in major updates (sandboxing Mediaserver, etc).
So you only get hotfixes, and not long-term fixes.
If IoT security wasn't even worse Android would have been the new botnet platform.