I’m not an IT expert, so I don’t know how feasible this is, but they should have at least two branches of updates. One that is strictly security and the other that are all the bells and whistles. I would love to stick with an old os if it’s not vulnerable to the outside world.
It doesn't need security updates if it doesn't connect to the Internet*, and most of these things really shouldn't need to anyway.
I just recently returned some smart outlets that would only work with my local Home Assistant if my Internet was up, because it all went through some cloud server. Now I'm using a combination of Zigbee and Z-Wave devices, which all connect to a local hub I have on battery backup. Now everything keeps working even if my power and Internet go out.
*Caveat: Wireless protocols could need updating too, but at least nobody's going to recruit my Zigbee devices into a botnet. Worst case my neighbor figures out how to turn my lights on and off.
Yeah I've never had this issue with Android, not least of which is because you're able to just root it and install whatever ROM/OS you want. If Google pushes an unstable update just wipe that shit and put Lineage on it.
Apple only gets away with it because they put their users in a walled garden where you have no choice but to receive Apple's updates on their timeframe. I quit that life in 2006 when they updated my iPod Touch into uselessness and haven't come across the problem again since switching to Android.
Back around android 3-6 it was more common, really hasn't been a thing for a while IMO. Have non-daily driver Oneplus 5t and 6t, both Lineage os 14, they work well.