Is it a big deal if my phone hasn't had a security update in 5 years?

My phone still works perfectly fine despite its age and I'm too cheap to buy a new one.