Extended support for SQL Server 2017 ends on 12 October 2027. After that date the instance keeps running and stops receiving security updates — the same quiet exposure that caught estates still sitting on 2016. The difference is that you are reading this with time left, which makes it a planning problem rather than an incident.
Twelve months sounds like plenty. It is roughly one budget cycle, one round of application vendor certification and one end-of-year change freeze. Most upgrades that miss the date miss it because the application testing started late, not because the database move was hard.

