They're building it with Android 7, which was before Project Treble[1], so future updates are at the mercy of all the chip suppliers and their willingness to port their ad-hoc drivers to newer kernels.
When the device stops receiving updates, it won't be safe to use on the Internet anymore and things like out-of-date SSL certificates will break things (see e.g. this video[2] for what browsing the web on Symbian and MeeGo devices looks like today).