Do old versions of Android still get security patches?
It is generally expected that users would upgrade to the highest version of Android available to them, so Google do not release updates to previous firmware versions. However, Samsung occasionally release security updates independently of Google to older models. It's also worth noting that a number of security issues are within apps and not Android itself, which the user is able to update via the Play Store.