I looked on my Moto Pure X phone and it shows the latest security update was in May. Lenovo doesn't think we need a more recent security update? I don't care about I don't have the latest OS; I just would like to have more recent security updates on the OS that I do have. This is my last Moto (Lenovo) product.
You are correct, the May update is the latest one for us... Don't feel so bad though, many other year plus old devices are in the same boat, getting anything but a major brand flagship phone will put you in the same boat in a year.
One word of caution, or more disregard for it... these "security updates" are not really important, yeah they patch various exploits, all of which are not usable and/or are caught by other aspects of Android like sandboxing or SELinux anyway. None of these recent exploits like Dirty Cow or QuadRooter are really dangerous to modern devices... Trust me, I have been in the security discussion thread of Dirty Cow on XDA and been trying to make use of "the most dangerous exploit Android has ever seen", even knowing the exploit, how it works, and what it does, it is useless on a device with with Lollipop or newer OS, we can't even use it to get a temporary root shell when we try to force it to have it, much less it trying to do it on a normal system. These exploits are blown out of proportion significantly, and these security "updates" are really about marketing and making people feel good than any real technical need. Have you ever heard of anyone actually being effected by one of these exploits? No, you haven't because they are not a problem.
Don't get me wrong, if security updates come, I will apply them and be thankful to get them, but they are not as important as we are being led to believe.
Now, bug fixes and OS updates, that is a different story altogether and we get shafted on that end too.