Even Android one promises only 2 years of software update. This phone despite being Non Android One got 7.1.2, 8.0, 8.1, 9.0 updates. Its running February patch. I think Nokia has done a commendable job with this phone. It has a outdated and weak hardware so Android Q even if provided( very rare) might not work properly. I wonder how this Feb 2017 phone is getting security updates till now.
Pie might be buggy but it running Pie is itself a big thing. I don't see any phone from other models giving so many updates to such an old phone.
Yes Nokia should have given users an option to chose between Oreo and Pie before giving Pie just like they did with Nokia 2. I think Nokia 5 will get a new build of Pie this month along with March patch