>pretty much every major manufacturer is delivering security updates on anything that cost more than a couple of hundred quid, and isn't more than a couple of years old
Including all active phones when describing patch adoption rates is being accurate; limiting the results to only the expensive recent phones is what would qualify as "swaying the metric."
A person shouldn't need to spend a few hundred dollars every other year to have a secure phone, especially given that major-brand (Moto, LG, etc.) budget phones have been powerful enough for a while now to more than adequately serve an average adult for 2-3 years.