Do you have an overview of what Pixel devices didn't get their promised security updates? I've gone as far back as the original Google Pixel and they seem to have stuck to their update policy in for that device (https://web.archive.org/web/20161122015826/https://support.g...):

    Pixel phones get security patches for at least 3 years from when the device first became available, or at least 18 months from when the Google Store last sold the device, whichever is longer.

I'm sure Pixel customers who didn't read up on the software support duration were disappointed that they only got three years of updates, but Google seems to have kept their promises with Android at the very least.

IoT crap is a different story, though. Then again, I don't think there's a single IoT vendor that I trust to provide security updates for a normal amount of time.