My S8 just received a security update a couple weeks ago, which puts it at over 3 years of updates. It's stuck on Android 9 though.
I really think Google could do better. Sure, you don't have to wait long for new Android version as with other manufacturers (e.g. Huawei), but 3 years is nothing to applaud Google for.