Using a non-updated device on the Internet is not smart if you have any personal information on the phone.
https://www.microsoft.com/en-us/security/blog/2020/10/08/sop...
In the article it explains how Google and the ransomers are doing a cat and mouse thing. If your phone is not keeping up, that could definitely be an issue.
A complete reset solves it tho.