And even then, while you get software updates on that custom ROM the firmware usually just isn't updated anymore so security is still an issue.