I run LineageOS on my Nexus 6, to get ongoing security updates. I also keep one other sacrificial phone running stock android with bootloader locked, so no more security updates, but I don't run anything on it but my banking app, since it's too insecure.