I believe the risk of running outdated software is super inflated and mediatic, 99% of people would be absolutely fine running a version of Android from 3 years ago or Windows 8.
That’s the same thing people running windows XP on internet were thinking in 2017.
Then WannaCry arrived and they got their data encrypted :)
WannaCry targeted everything with SMB exposed, blindly.
Also, you should read more about security through obscurity, the fact that “no one will target you because you are a low-value target” is a false sense of security.