> Unnecessary but great 5-10 years personally is what I think the minimum should be for security-related bugs. Fact is, I'm probably never going to hold off o

> Unnecessary but great 5-10 years personally is what I think the minimum should be for security-related bugs. Fact is, I'm probably never going to hold off on a phone for more than a year (I still have a 6S+), but I always hand-down my old phones. I can't use a 5-year old phone, but, others can and should still be able to do so safely.