I have this Android device with a few apps installed (mostly the essential Google services, Whatsapp, Firefox and a few games), and I try to avoid unknown apps as much as I can. And even then, I don't trust my own phone to be secure. I have this huge worry because it's not receiving any updates from Samsung anymore (it's a GS6), so I kinda treat it as a semi-untrusted device: I will never install apps from banks/investment (lol Robinhood), I try to never do too-sensitive things from it. The only sensitive thing I keep on it is my main email, and it always worries me. I do use it for 2FA.

What is your take on this? Do you share the same constant anxiety that your phone may be insecure? Do you take any specific steps to help mitigating those fears and reducing the probability of being compromised?

News such as the Agent Smith one we saw today makes me even more nervous. Now I'm considering switching phones again, but the reality is that I simply do not need a new phone (my hardware works just fine!), it's super expensive, and I would end up doing this simply because of software updates for the OS.