Of course, as long as we're in the dreamland, most of these security upgrades do not actually require a hardware upgrade.

Technically no (except for the gradual performance drop they introduce, + occasional TPM bullshit), but of course in practice, companies see this as a choice of spending money on back-porting security fixes to a growing range of hardware, vs. making money by not doing that and forcing everyone to buy new hardware instead.

I’m running Windows 10 ESU on a 13 year old PC without issues. While it’s admittedly near the end of its life (mostly just due to Windows 11, though I might repurpose it for Linux), I’m expecting the next one to also last a decade or longer.

So is my wife, her laptop is still decent today, but doesn't support Win 11. I'm not worried about Microsoft as much as certain other competitors killing it - similarly to how she was forced to update to Windows 10 in the first place because, one day, out of the sudden, her web browser decided to refuse running on Windows 7.

My "new" computer is a laptop with an 8th-gen i5 and 8 gb ram salvaged from the Windows 11-incompatibility heap (actually 3 of them, so I have 16gb in it). I installed Kubuntu on it and it runs extremely well. I can even install Windows 11 in a VM if I really need it. I'll probably be buying new (old) ram for it and maybe a bigger drive.