@heffeque - I never said 3 years is indefinitely, my point is that they can't update indefinitely. If we use how long a device is usable for, then that can be a really really long time. That said, with the recent trend of phones having built-in batteries (which I hate btw), 3 years seems about right.
@ED - There has not been a method to root via wifi/bluetooth in almost a decade. If you know of one, please share with the community.
Now to be clear, wifi/bluetooth privilege escalation do exist from time to time but not on a monthly basis as you claim. About once a year, maybe twice if you factor in vendor specific ones. But even then, most of these are extremely hard to exploit and Google Play handles it just fine.
Google Play store is installed by default on every samsung android device. You do not need to have a google account for the scanner to work.