The excuse has been driver and firmware support from the vendors. Google has extended security updates to 5 years for the newer Pixels. That's fairly decent, given that each one is only on the market for ~1 year.
Obviously the cycle has to be longer for companies that keep older phones on the market as a lower cost option.
Obviously the cycle has to be longer for companies that keep older phones on the market as a lower cost option.