It's not a crime, but it's a foolish thing to do if you care about your data. Find vendors that aren't user hostile and still deliver security updates. For me that's various flavors of Linux (Debian, Fedora, arch, depending on my mood) and GrapheneOS on mobile.

GrapheneOS still takes most Android updates though, no? And since at least Android 13, I can only really think of updates that were hostile (to me).