I've mentioned this on here before, but my otherwise perfectly functional Pixel 3A has been out of security-patch support for nearly a year. It's disgusting honestly, my only options are to try to find some open source project keeping patches up to date, have my most important information on an unpatched device, or throw it in the trash.
If you do switch to OSS, let me know how it goes -- I've considered switching to Replicant or PureOS for freedom/privacy reasons, but haven't had a good enough reason to put in the effort yet.
Edit: looking at the release date, it looks like I've had my phone for ~5.5 years, and luckily I've had zero of the problems of the person who wrote the original article. All my apps still work as expected, and I've never noticed issues with new apps I download. I'm not saying their problems aren't real, just that they're not usiversal.