Android security patches

at Best buy the card said 7.0, so I bought it. so I looked at it and it said 6.0 , so I got pissed off. and then the 7.0 came up for update. so I was happy. this phone is better than the ZTE I have. but no security updates. now waiting for 8.0 that the xda forum said is supposed to happen around the first of the year.
They should have been clearer. It shipped with 6,upgradable to 7
 
That's how it was with my M3 tablet. Started it up with 6.0 then an update few mins later for the 7.0
Mine didn't update automatically to ff. Had to to spend hours with ff to finally get it to update
 
Ff checks with the phone maker and says the the dl not available for the phone. Only 7.0 is available. So that didn't get the security patches. They just do not care about us. Now there is a lot of stuff in the Google store too download for some protection. And the phone maker say all you need is in the phone Manager.