> Many phones only get software updates for a small number of years, often three years or less.
True on Android. iPhone lifespan is longer at 5+ years.
For instance IOS 16 will not support handsets older than 2017, but IOS 15 will continue with security updates for some time after that (presumably 2-3 years). So somewhere around 8 years total device lifespan in terms of security support.