Based on Android 12, I'd rather zero years of OS updates and more years of security updates.
Sick of each Android update requiring relearning where all the stuff I've been doing for the last year (or longer) has been moved to.
Android 12 made one of my major workflows start failing - leaving browser tabs open and coming back to them later. Something about how Android 12 works (I'm guess to do with how it swaps out background apps) means now most of the time when I go back to my browser, it forces a page reload, meaning I lose context of whatever I was doing before.
Bunch of other small irritating changes. I guess it doesn't matter now that it's out of support - I'm too scared to keep using it. Just gives me the shits.
To me, security updates are imperative. The first security update that I don't receive is when I look for a new phone. OS updates are practically window dressing- I can go without.
Nowadays OS upgrade gives us near zero feature, especially since Google distributes some updates as Play Services and other mechanism. Only security update is fine, maybe they don't need Qualcomm's update for latest kernel.