Comment by quiet35

I agree, people don't care. There are plenty of offers of Android 4 and even Android 2 phones on secondary market here, not to mention more recent Android versions those are still long obsolete. People buy and use those, they are not aware it's an issue. A phone is a phone, it works, why not to use it, right? I personally use a phone that runs alternative LineageOS-based firmware, the updates for this firmware stopped 2 years ago. I suspect there are multiple RCE vulnerabilities either in the OS and in the drivers now, and it bothers be somewhat, but not to the point that would force me to spend money on a new phone yet, exactly for the reason that I've never heard of remote attacks on phones of "ordinary" users who are not activists or, say, politicians.