@joepie91 @rachaelspooky also I don't think the security update thing is actually that bad

Google Play Services are updated for old models, and you can still run a modern browser that has security bugs fixed, so you can defend yourself against web exploit kits.

If you're not running APKs from sketchy websites or the malware that sometimes is in the Play Store you're probably fine.

the largest risk with smartphones are scams and those work regardless of updates :p