Who stays with M1? What 3rd party are you trusting your security to, after end-of-life?

Some of my customers are staying on M1 and we chose MageOne for their security patches. I’m just curious what party you are using? Anyone recommends something? As far as I know Adobe only recommends going to M2.