Custom supported roms will continue to get security updates whereas oem roms get updates for maximum 3 years since phone release.
From a security perspective, custom roms are still worth it.
From a security perspective, custom roms are still worth it.
And those are the painful ones, since drivers have kernel access. The security situation on Android is really less than ideal :/