[corford]

Fair point. Hopefully Lenovo will get better at this. I kind of overlook it since I don't use my phone for anything other than calls/sms, email, light web browsing (99% of the time wikipedia or hn), google maps, whatsapp, uber and taking a few photos. Rightly or wrongly I don't care too much about security since I'm not installing loads of apps and don't use the phone for much (still encrypt it though in case of physical theft).

[fulafel]

If you hook it up to your Google and/or other social media accounts, you should care about security because a compromised phone can compromise your account, spam all your contacts, pwn your Gmail, etc.

Even if you don't use a Google account and install only selected apps, you need an up-to-date OS for web browsing, there are hostile ads even off sites like Reddit due to ad networks funneling bad stuff through. Also there are similarly unsafe ad network content embedded in otherwise reputed apps.