He needs to weigh the risk versus the cost of a new phone.

There is a custom firmware card LineageOS but it's a community effort. It may get up to date security updates merged in but it could be vulnerable in other ways.