Do those 7 years of updates come at a steady clip for the Android security patches as Google and Samsung mostly do it, or is it a patch here and there with massive swaths of time with no patches more like Motorola?

The former is progress, the latter is functionally not much better than every other OEM.