Didn't some recent Google Pixels have a baseband issue that allowed a remote takeover of an unpatched device by hackers knowing nothing more than the device phone number?

Security updates are not optional.