Ridiculous to target Apple here. They have been way better than any other mobile phone manufacturer about this. How many Android devices released over 5 years ago still have access to the latest OS version and security updates?
If folks over at xda-developers could do it in their free time, Google could too — if they wanted.
But besides, Android is feature-complete. It's done as a product. There's nothing more to be added. You really only need security updates.
I have an iPhone which got a security update a few months ago. I think the phone is seven years old now.
Meanwhile, the Android supplied by my job is done with security updates after a little under two years.
I get not giving full OS updates for longer, but it seem like security updates for an expensive, important device that most people rely heavily on should be for 10 years at least.
This behavior would seem to contradict your statement.