The problem is the fragmentation.
The distribution of Android versions is not uniform on all devices, because many models are not updated, and then stuck with a Android dated version.
This situation has become increasingly evident, and it has generated many security problems, leaving the older devices exposed to potential vulnerabilities.
I use an old Samsung S3 that doesn't get updates for years now.