The ID on the phone thing is weird. Like I’m gonna give my phone to a cop when they ask for my ID. That’s a nope from me.
That just seems like a privacy nightmare. No one touches my phone. There’s way too much personal info on there to hand over to anyone, much less cops.
It's not about being targeted, it's about being caught in the big fishing net that scammers are throwing. You don't have to be targeted to have security concerns.
If a phone isn't receiving regular security updates, I won't use it. My Pixel 5a just got replaced because it's coming up on end of support. My new Pixel has 7 years of support, so I feel a lot better about keeping it longer.