It is easier to break something than to reverse engineer drivers and firmware and maintain yourself XD

Also, firmware updates need to be signed so it is impossible to update, unless there is a really bad vulnerability

And you can buy phones used, my most expensive one was under 400€