It doesn't mean that you should toss your phone away, but from a security perspective your operating system is very much a legacy if it didn't get any updates for 6 years. Luckily on Android your can often flash an alternative ROM when official updates are over.