What a load of crap. My phone is 5 years old and the only security risk is me blindly installing questionable APKs off the Internet or clicking pop-up ads or something. It’s not like I’m walking around with a time bomb or anything when all I do is browse a few apps and text and call.
Also the new pixel 8 supposedly is supposed to come with 7 years of updates. It’s entirely possible Google abandons that plan though, given their track record.