Well yeah, because why would phone companies care? Consumers buy devices based on camera and display quality, not for security, privacy, etc. I just had a chat w/ a coworker about a Chinese device with an incredible camera and big battery, and I highly doubt it does anything but the bare minimum for security. It's a cool piece of hardware, but a no-go for anyone that cares even a little about security updates.
I have a Pixel device because it has a long SW support cycle (Google promises at least 7 years), and I use GrapheneOS because it removes Google's spyware crap. I'm not married to GrapheneOS or Pixel devices, I just need something where the software support will last at least longer than my desire to keep the device (about 4-5 years for me). I've ditched each of my last phones largely because they ran out of security update support, and that sucks.
I'd prefer a Linux phone w/ decent security features, but they don't meet my minimum standards for things working (just need phone features to work properly, don't need apps). The moment a Linux phone comes out than actually works properly and has reasonable security, I'll switch. The FairPhone could be that, but it's not, so I don't have one.