Built in obsolescence
Since the EU has rules against built in obsolescence, perhaps the association should have argued that a phone without sufficient security upgrades is obsolescent. Samsung should be given the choice to continue updates or be forced to release (open source) the hardware drivers so that FOSS groups such as UBPorts could create a working version of Touch and KDE to port Plasma thus ensuring that the still working hardware doesn't become landfill.