Every device running an old OS is vulnerable, so it's better to throw the dice on an aftermarket ROM. Edit: Though to keep things fair, it must be said that th

Every device running an old OS is vulnerable, so it's better to throw the dice on an aftermarket ROM. Edit: Though to keep things fair, it must be said that that particular argument only really applies to old devices. If you have a new device (or rather, one still getting regular security updates from the vendor) and a trustworthy vendor, a person could reasonably argue for staying on the stock ROM.