Meh, read through the releases and I'm hell bent on keeping Pie on this AT&T variant.
Goggle Assistant is a security risk in its self, not running.
No secure folder, no fingerprint reader or even a screen lock; I keep the device with me 24/7; more worried about getting locked out by my own security. I don't let anyone use the device, ever. No exceptions.
No NFC.
It's irritating Samsung didn't ID the floating apks that were risks but any I use either are from reputable vendors or transmit zero data.
Most viruses and trojans people download themselves; 6 years running outdated Android OSs and never did a wipe due to malware.
This risk of a patch or OS update screwing up this device is far greater than malware doing it... in my usage observations.
Lol, been running outdated XP-Pro and W-7 with the same results for many years. It could always happen on -any- OS; vigilance and attention to what you do is more important.
I scan frequently for malware and go hunting anytime there's abnormal device behavior.
Empirically it works for me... may not for you though.