A £150 back market phone is not a secure device. It probably stopped receiving security patches a month after its release.