And although you get five years security support for Ubuntu LTS, on a prod server that goes by surprisingly quick. After that if you want to stay secure you're talking a full upgrade (not always possible on a prod server) or paying for ESM via Ubuntu Pro.