I agree that's a problem. But at least 4 > 2, and being secure until 2025 is at least better than being secure until 2023. (It also allows those who mind the security of their devices to use them for longer compared to a lot of the competition, which is an ecological improvement, although not a sufficient one.)

I'd also like to see longer life cycles that aren't limited to a few years due to unhealthy economical incentives. However, although you may not have meant it that way, your comment seemed to attack this particular policy, and that seemed a weird thing to do considering that it's at least better in that regard than the vast majority of the Android phone market.