I wonder how much of it is due to a walled garden, and how much of it is due to iOS devices getting security updates.

It seems like even expensive flagship android devices get a year or maybe 2 of updates now and then you're just left on your own.