I just got a new phone despite my previous one being totally fine because it's no longer getting security updates. I've had it for ~4 years with no issues, so I got a Pixel for longer security updates.
So yeah, they totally could last longer if they kept supporting them.