[GenericPoster]

I am and in general. I've bought and used android devices that haven't received updates for at least 3-7 years. It's a phone. If you can make calls and text, it's already doing it's job. If you have a device that regularly receives security updates then it's up to you to download it but the idea of getting rid of a functioning device just because its no longer receiving security updates is ridiculous. Especially since these devices often get sent to developing countries. The entire security theatre for consumer devices is incredibly overblown. Sure there was a time where viruses and malware ran rampant, but those times have passed but companies don't make money if they don't sell new devices so their incentives and yours don't align.

For computers, it depends but as long as you're not downloading sketchy shit and have an adblocker then you're fine.

And once again, all of this applies as long as you're a nobody, which is at least 70% of the population. Those who don't work in government, medical, aren't businesses etc.