And it will have a solution later this year. Android updates are increasingly supported for longer and longer periods of time on top of the line, high-end,...
But people wouldn't buy the newer chip because the previous one would still have support. THAT is why the source is closed. To sell support until the cow is milked enough and then sell a newer version.
I have so many working phones that have not received security updates for a long time. It is a shame, as I need a second phone and they are perfectly suitable but I worry about how safe they are to use.