@GalacticBox @tio @calyxos "But people shouldn't take it to an extreme and use an insecure device for years on end"
Years on end? You make it sound like I've been hanging onto this phone for the last 10 years.
I bought the phone at release in August 2020. Google ended support for it in August 2023. Three years is an absolute joke.
My understanding is that Graphene gets the security updates via AOSP. Since Google no longer provides updates to the 4a then there is a definite security risk.