It misses one important choice: "I want to get notified of new releases of the operating system and want to have a graphical upgrade path."
Otherwise people just run their no longer supported OS until something stops working (I've seen this countless times ...), as very few people follow blog posts or social media feeds of their operating system.
This rules out lots of supposedly "beginner friendly" distributions, such as elementary OS or Linux Mint, as they don't notify users about the availability of a new distribution release. Elementary OS doesn't even offer in-place upgrades and requires a reinstallation.
There are plenty of reasons to get rid of Ubuntu, but this isn't one of them.
Before Ubuntu Pro, packages in
universe
(andmultiverse
) were not receiving (security) updates at all, unless someone from the community stepped up and maintained the package. Now Canonical provides security updates foruniverse
, for the first time since Ubuntu has been introduced, via Ubuntu Pro, which is free for up to five personal devices and paid for all other use cases.Debian is actually not that different (anymore). If you read the release notes of Debian 12, you'll notice that quite a few package groups are excluded from guaranteed security updates, just like packages in
universe
are in Ubuntu. Unlike Ubuntu, Debian doesn't split its package repository by security support though.