Nexus 5 EOL: Security Updates?

My wife's Nexus 5 is still perfectly functional. I had been planning on replacing it with this year's new Google phone. But, with the price of the Pixels, we can't justify the expense. Since the Nexus 5 is now End of Life (EOL), is there some way to continue to get Security Updates? Would flashing a custom ROM do that?