Motorola recently launched several phones with no Android updates but five years of security patches in Europe.
This could be due to the company’s interpretation of EU regulations regarding software updates.
It seems like the regulations don’t actually force smartphone makers to offer software updates at all.
I’m not sure, but even if that’s true, there are other stores available on slightly older versions (fdroid, obtainium, aurora). Note, however, that some newer versions of android will prevent app installation outside of their official play store (they tag it as "side loading, but it’s actually just installation).
Edit. Spelling.