Yeah, but it's an excellent soldering iron and if it works there's no need to update.
There's no security risk. It does not connect to te internet.
The Pinephone was great for getting some mobile Linux projects back on track, but it's not something that can actually be a decent phone.
The Pinecil seems to be their best quality product, weirdly.