Something like RHEL 6 is running on a 2.6 Linux kernel, all security patches has to be backported. That is an EOL kernel. Almost all versions of the software bundled with RHEL 6 have been EOL from upstream providers during it's ten year lifetime. Of cause you're free to try to attempt to applied any patches yourself, you don't have to pay.

If RedHat promised to keep CentOS 8 around for 9 more years, then yes, that is very disappointing. It was a stupid promise to make in the first place, but still disappointing.