. . . Apple has let plenty of vulnerabilities go unpatched and has not always provided robust OS updates (at least ones that don't also cripple the device) for years.. . .
I can’t think of one that’s gone unpatched for years that would significantly compromise the privacy & security of my device.
Do you have some examples please?
. . . Also, Apple sells multi-year-old devices as new. So an iPhone 7 can be bought today and be ineligible for updates in just a few years . . .
Again this happens with android manufacturers too, although their devices aren’t supported for anywhere near as long.
The iPhone 7 should still have at least three years of updates left. That’s more than any android phone except the Google Pixel.
It’s up to the customer to educate themselves on these things before they make a purchase. If they don’t, there’s no point them moaning about it afterwards