When I got my last pixels Google were giving 3 of security updates. I bought it one year after release. For an average consumer doing the same thing they would have had an unsecure doorstop after two years. I installed some ROM and kept it alive (still not as secure as using an iPhone, of course).