Android 2.x support

There are still plenty of phones out there, even new ones being sold, on 2.3. Thing is, how is Google supporting the OS? Most of us here probably don't use/have a phone with 2.3 or lower anymore, but what happen to those that still do? Is Google still keeping things like security updates in check?