I have an Android 4.4 phone, and while it has worked acceptably for me right now as I am self-employed, if I were working for a company that required me to have access to sensitive customer data, having a phone that still received security updates would be a hard requirement.
..which reminds me I have some more work to do, given the recent publication of https://source.android.com/security/bulletin/2016-07-01.html
I understand that we talk about this sort of thing quite a bit, but I can't imagine actually doing it myself. My phone is just supposed to work for me so I can get my real work done and have time to enjoy outside of it. I'm not supposed to work for it.
I'd guess you have to really enjoy working on that sort of thing, but then again you called it "work to do", so I'm not sure.
I have seen SSDs on ebay with the converter built in, maybe kill two birds with one stone?
Performance is more than acceptable, the thing boots (Linux) in a few seconds (that is, a few seconds after BIOS has done its thing of course). In other words, those 3€ for the adapter (incl. shipping) were well spent...
I use a 5 yo phone (Motorola Defy+). It runs Android 4.4.4, thus far I've not seen a valid reason for wanting something newer. It still runs for about 4 days on a single charge, using the original battery.
Things start looking bad for the tech industry when people start showing off with 'old' stuff instead of brand-spanking new.