that's at least 3 years each using a phone with absolutely no security updates to network, wifi, cryptolibs, html/js engine etc.
not that iphone are any better. you have zero idea what you get on a new ios for old devices since the binaries are not the same. only thing you can be certain is the extra slow down loop
A big benefit of Android, its modular and bits and pieces can be updated independently. Part of the reason iPhones require to have long term OS support is the fact that their browser would otherwise be stuck at an old version.
You have it backwards. In the early days Android didn't have any components in the Play Store and Apple still provided updates for much much longer than Android manufacturers.
Google moved the web browser component to the Play Store because Android's OS updates are so bad. They had no choice but to do it.
Apple could do it too if they wanted to but they don't need to because they actually provide OS updates for a decent period.
Regardless of the history though, now, Chrome (+ webview) and Firefox on Android receive at least one update per month (sometimes more frequently). Thats a plus.
On the S7 I got security updates up until September 2020 IIRC. I anticipate the S10E will continue to receive security updates for just a little while longer and it's currently on Android 12.
My point was that old Android phones "not working" after a few years is complete bs. The S10E was launched in March 2019 and still going strong.