Two years later with no updates your phone has a known access vulnerability. As long as no one knows the phone's purpose, you are safer.