You gain very little from security because nobody is targeting you…
It’s not about being targeted, it’s about being caught in the big fishing net that scammers are throwing. You don’t have to be targeted to have security concerns.
If a phone isn’t receiving regular security updates, I won’t use it. My Pixel 5a just got replaced because it’s coming up on end of support. My new Pixel has 7 years of support, so I feel a lot better about keeping it longer.