In the fact it doesn’t have a major Android upgrade and probably not routine security which includes numerous security and CVE fixes. A quick search says (unofficially) NothingOS promised updates once every two months but aren’t even honoring that.
Or are you implying that Android 13 is at least as secure as Android 14 or that a two month old OS (which includes all those CVEs) is secure?