Nokia
Are advertising their Android phones in part by stating their "pure Android" nature and that they'll get regular security updates. Specs aren't bad either, my partner bought a Nokia 8 yesterday and it's rather nice - considering getting one myself.
My HTC One M9 is still on 7.0 April 2017 security update.
It'll be interesting to see how many other manufacturers start to jump on the "pure & secure" (tm) bandwagon.