The issue that needs to be addressed is economic. Devices are paid for once, but security is ongoing work. The Android world has shown that no-one has figured out how to deal with the mismatch.
I'd expect that devices on subscription will do better on security because they have an economic incentive to do so. Even then vendors will want to end of life hardware that is no longer economic to support.
I'd expect that devices on subscription will do better on security because they have an economic incentive to do so. Even then vendors will want to end of life hardware that is no longer economic to support.