Just because the phone companies should be doing that doesn’t mean that you don’t account for what the current case is. My personal laptop is over a decade old, and my phone is several years old too. I am absolutely a supporter of using your old devices as long as they’re still useful, but when you start to become vulnerable to security issues on a device you use consistently everyday, you need to fix that, whatever the solution may be.