This is the minimum they promise but they can still issue security updates for core system components like safari for a few more years.