I am less concerned about security updates on Android phones these days because a great deal of the relevant updates take place in the Google services that are now updated through their normal app store updates. For example, a recent s curity bulletin I came across said the latest security update would fix it, but it would also be caught by Google Play Protect as well, so even if my phone no longer received official updates I'd still be protected from the major source of vulnerabilities: installed apps.