All Android One phones get security updates for at least three years. Samsung decreases the frequency of security updates after two years, but still provides some. Google updates its phones for quite a bit longer. Of all the phones I've had, Motorola has been the worst by far with respect to updates.