Really? My wife has been getting very regular security upgrades on hers, and I'd been pleasantly surprised. (I'm almost always the one to trigger off any upgrade on her phone when I notice she's got one queued up waiting to install)
Meh. The latest available security patch for the Android 8.0.0 on my Moto Z Play which I purchased 2 years ago is the one of August 2018. Yes, I didn't purchase the phone directly at release date, but just a bit more than 1 year of security patches isn't great. It hurts even more because the hardware is incredibly sturdy and with the battery pack mod, charging woes have been a thing of the past.
EDIT: Wow, apparently they are still advertising and selling this model for which they haven't released a security update in almost a year!