> How long should Apple be required to provide updates, both security/vulnerability and future API support?

If they want to drop support for still functional hardware, they should make it possible to install your own software on it.