Using a phone that no longer receives security updates simply isn't safe and should be avoided. Previously it was common for many Android manufacturers to support new phones for only two to three years, but now you'll find phones like the Google Pixel 8 series coming with seven years of software support.