I think we should be striving for a 5+5 plan: you should expect feature updates for five years and security updates for ten years. More would be better - certainly for security updates, but these are the minimums we should be expecting.