1 - One needs to buy a new Android 8 device.
2 - Android 7 has currently about 13% acquisition after one year
3 - There is currently no obligation for OEMs to provide updates
4 - Given the failure of security updates, only being delivered to flagship devices, I believe Google will ship them directly when they actually do it.