You should be able to manually update it to newer android versions after the official updates end since it has treble. The kernel as of now is still stuck on 3.18. Unless the blob makers update to 4.4, that will be the limiting factor regarding security updates.