You gain very little from security because nobody is targeting you…
It’s not about being targeted, it’s about being caught in the big fishing net that scammers are throwing. You don’t have to be targeted to have security concerns.
If a phone isn’t receiving regular security updates, I won’t use it. My Pixel 5a just got replaced because it’s coming up on end of support. My new Pixel has 7 years of support, so I feel a lot better about keeping it longer.
My phone has a passcode, so does my password manager and my MFA app - all different passwords. Those are the only ones I need to remember, so it’s not too bad.
Probably not ideal, but to break that someone needs to A) physically get my phone, B) unlock my phone, C) unlock my pw vault, and D) unlock my MFA app. I’m fairly confident in my setup.
Same, but my seeds are stored in a separate vault from my passwords. Seems like having MFA and passwords in the same place defeats the purpose. I used to let keepassxc auto fill MFA tokens, but finally changed to a separate app.
I use it for my work mail. I can’t speak to their privacy, but I think it’s ok. So far as I know they haven’t done anything stupid, and all the connections are only from my device, no cloud intermediary.
I do like that it allows you to only apply the ActiveSync policies to the app instead of the entire device. If my employer remote wipes my device, it only impacts the app.
Fair, but I meant updates from the original manufacturer.