This is a really bad mindset that somewhat propagates amongst Android enthusiasts. It creates an excuse for Google and the rest of Android OEMs to ignore security and accountability. Motorola just announced a $399 Moto G stylus 5G phone, and they only promised 1 year of OS update. Only 1 year of OS support for a $399 phone! Worse, it comes with Android 11, so the only update it would get is Android 12, which is already coming out later this year. And that's it. That's beyond ridiculous, and not any better than a $100 Xiaomi phone. Talk about e-waste.
Let me ask you, do you stop patching your PC? Do you refuse any security updates, any Windows defenders updates from Microsoft? Do you run old versions of your browsers, unpatched? Do you expect a PC to only have a year or 2 of security updates? None of these are acceptable, yet we are okay with it on our most personal and advance computer in our pocket?
This is why I'm biased towards Samsung. Samsung is not a saint, but at least they are brave enough to promise 3 years of security updates on roughly their whole lineup, albeit some only getting it on a quarterly basis. That's better than the 1 to 2 years tops other OEMs are offering, even for their expensive phones.