If you really want secirity patches as soon as they are released. You should buy a Pixel device. T-Mobile has no control over when Security Updates are pushed. Call and ask Samsung.
I know there's an update coming for that one, but it's still being determined. You'll want to keep an eye on the dedicated software page as it'll have the latest info available on software.
Manage your T-Mobile account