Same experience here.

I have an iPhone which got a security update a few months ago. I think the phone is seven years old now.

Meanwhile, the Android supplied by my job is done with security updates after a little under two years.