Assuming you are using an old phone with termux to serve de webpage. What could be an attack vector?
The phone will be running Android 7.1