I'm still using my Google Nexus 6P that I purchased five and a half years ago. Yes, it hasn't been updated for years but I almost never download new apps to it and I haven't been compromised so far (as far as I am aware).