BaronAfanas
EOL devices can't be considered secure anymore, at all, since they are missing critical security patches and don't receive any firmware updates from Google anymore. There is no way to make those devices secure again. Extended support is only provided for the time it takes people to get a new device, as threat reduction. Still not secure.
You should get a supported device ASAP.