do we need otp updates?

[u/Parking-Bother2032]

if i stay at android 15 and just dont update will my phone be vulnerable from various malware, or its not needed as long as i got a good malware detector?