It's a massive risk, and only a matter of time. Especially for hardware that's no longer updated firmware wise.

I'm thinking of what to do myself.

The ghost of android releasing 6 month old patches every month is going to come home to roost.