Right? It may still largely be functional, but I would never trust that device in the open, it's just ripe for a bevy of attacks.
I really wish Google would expand their service lifetime on their own devices, because I feel 2 years is really too short.