To be honest, my phone has been nagging me for months that the new version of Android is available and it wants to update. I just keep dismissing the notification. Phone runs fine as it is - I don't want to risk updating the OS and some application(s) deciding to break, or the whole phone slowing down because the latest OS expects more up-to-date hardware and generally makes my older phone run more slowly.
Yes, I'm probably taking a risk by not getting the security patches, but on balance I trust myself to use web/email responsibly to reduce the risk, and just keep using my phone as I always have.
YMMV
Biting the hand that feeds IT
