A friend of mine has an old phone running Android 10 that hasn't received any security updates in 3 years or so. Wonder how much of a problem it is. How easy is for a hacker to gain access to say a banking app installed on the phone? Do old Android phones without recent security fixes actually get hacked often?