It has gone over 4 years without updates the firmware, kernel, drivers and HALs. That includes many critical vulnerabilities usable to take over the device remotely or from an app. It's also essentially not going to have working encryption in After First Unlock state. The secure element wasn't as hardened and is known to have been exploited by commercial exploit vendors but encryption would work with a strong passphrase when at rest. It's not a good situation.