Android One
is the way to go. Hoping or asking for the OEMs to compile updates for their kit 3 months after said kit was released has already failed for good.
And no legislation will ever change this. Legislation is pointless vs. the bottom line ...
That said, my Nokia is one year old and I got the march 2020 update already. Google, unlike the OEMs, is quite serious for Android and security updates.