The article says
> According to the Android security bulletin, there were no security patches issued for the Android system in 2019 for versions below 7.0
But this doesn't really matter. The only way the vast majority of Android users will get an update is if there's an "over the air" (OTA) update. Which most device manufacturers don't provide. I've seen Samsung phones from 2016 which are stuck on Android 6, no security updates. I don't actively use Android personally, but I suspect there are more recent phones in a similar situation.
This is the crux of Android's problems re security updates.
The only consumer-grade phone I'm aware of that does a decent job of security updates is Google's Pixel. Interestingly Samsung do provide security updates fairly promptly for some models -- possibly because they're widely used as corporate Android devices and their purchasers made security updates a requirement.