Re: The bad news
"What's unclear? Many, maybe most, of the vulnerable devices won't be fixed -- ever."
Yeah, but it is also clear most handsets wont also be pwned, and most users wont care or know either way.
I know us lot like to think that everyone should be super security savvy and fully alert about their data, but most people just don't care - unless it has an explicit and noticeable effect upon them.
Certainly, I don't think your solution is the right one. Shutting yourself off from the world is not the answer, and neither is overplaying the threat.
Are the risks of someone getting some/all of your data proportional to your actions?
I don't think so personally. But hey, each to their own.