After two years you're lucky to get any updates from your carrier. Phones aren't useless after two years if developers like aorth commit their time and effort to supporting them. I have a phone I purchased in 2010. The carrier abandoned it. Thanks to the CM developers, I can still use it with reasonable confidence that it's secure and maintained.