For example, my Nexus 5 is vulnerable to Broadpwn (CVE-2017-9417), but since Google stop supporting it I'll never get the updated Broadcom firmware. LineageOS can't patch this, so I either need to live with the fact my device is vulnerable to WiFi takeover or switch to a supported phone.
I'm seriously considering picking up an iPhone because of this.