The question isn't whether Android 5 is the main target or not in the hacker "community", if there is even such a thing. You are the target, first and foremost. And right now, in this thread, you gave critical information to a potential attacker (let's say a crazy leftist hunting nazytrumpsupporters); You gave away the fact that you don't perform security updates, and you gave away the version of the outdated OS you use... Now, the "attacker", can also very well be a relative, like your kid, your wife, it's not necessarily some shady guy wearing a hoodie in a basement far far away Now you do what you want, I'm not here to change your mind, I'm just arguing for the sake of it at this point