You can see my link here:
So installing /e/OS on a old phone like the S4 is still secure, just not very fast/nimble ?
Regards security of the phone, and how vulnerabilities are dealt with - I probably need to go do some more reading on where /e/ OS sits in the layer cake, if there is one.