Sorry, I misunderstood what OP was trying to say. I didn’t realise they were talking about feature updates when they mentioned the 5 years. A security patch is still an update to the operating system and evidence of support, so my initial reaction was that they were wrong when they said “5 years of OS support”.