Just how unsafe is it to use mobile phones that no longer get updates?

Many android mobile phones only get security updates for a short period (typically 4 years) and perfectly good phones become a security risk in a very short time.

Ok Samsung have started to increase support to 7 years for latest flagship models but imo that is still not enough.

From an environmental perspective, many are faced with replacing perfectly adequate phones.

I am trying to persuade and elderly friend to replace her phone but she likes her phone, and it is reliable.

So how much of a risk is it using a phone that is not updated anymore?

I am guessing the major risk is downloading malware apps.

I would like to see a Windows style admin and standard account user approach whereby standard user cannot install apps without admin user permission.

Possibly, Google Playstore should be forced to take a more major role in ensuring apps do not have malware.

I think major developed countries e.g. US,UK,EU countries, Antipodean countries, India etc. should pass laws such that (say) 10 years of updates are required.

Google Playstore should be forced to take a more major role in ensuring apps do not have malware.

They already do, All apps are checked before admittance into Play Store.

dencal said:

Google Playstore should be forced to take a more major role in ensuring apps do not have malware.

They already do, All apps are checked before admittance into Play Store.

Click to expand...

Perhaps for more "mature" malware but what about new malware?

cereberus said:

Perhaps for more "mature" malware but what about new malware?

Click to expand...

Google Play Store works on the same principle as Apple, all are vetted before entry and all apps are routinely checked whilst in the store.
I think being such a large enterprise they can rely on expertise at malware protection, and keeping their good safety record.

It depends how old the android OS is on it.

Newer versions of android os broke the operating system parts up and a lot of individual pieces can be updated through the play store for security purposes.

A lot of the malware found on the play store typically is found and then remotely removed when it does happen to make it past safeguards. It will be even more locked down soon with the requirement of verifying devs for sideloaded apps and the like.

I have a father in law and mother in law on a pixel 4a and even though it does not get updates anymore, the phones work great, and I am not worried about them getting infected. They keep to the apps on their device and never download new ones.

All of their apps still get updated.

Obviously being on a newer platform and supported would be stronger security than an older phone, but I don't think it is critically bad.

The browser and everything critical still gets updates.