Every phone has potential unknown vulnerability. The problem is if there are no security updates, they become a security issue when discovered as they won’t be fixed.

Vulnerabilities in current gen phone getting updates exist too. They only get patched when the manufacturer or Google know about them.

The flip side is it’s probably had all the most obvious flaws patched already. Newer phones may not, yet. So be cautious is always a good idea.