304n Still, keeping your device updated is the best way to ensure your security doesn’t just come down to luck.
Security comes down to luck if one in installing random crap on their phone though. If they follow general practice of safe browsing and installing safe/trusted apps then they can’t get hacked unless a hacker gets physical access their phone to exploit a potential critical bug.
Outside of CSI Miami and similar Sci Fi shows it is entirely impossible to walk around the street for example and get hacked by someone remotely because they sat at their PC, smashed around a bit on their keyboard to hack a whole network and get to your IMEI and MAC address through a cell tower (which they hacked into), and time that at the exact moment when a phone broadcasts its IMEI to that mentioned cell tower. Even Mission Impossible The Final Reckoning is a documentary about realism if compared with this. Plus the fact that pretty much every existing carrier uses CGNAT for mobile devices, which hides your true IP address.
The only way for hackers to hack you is for you to give them access to your phone (by installing random insecure shit on your phone, ideally having root access and giving permissions to anything that shady app asks you for). You have to go through a lot of hoops to get hacked, and all of them by your own choice. Not installing an update does not instantly make your phone insecure.