> Even today there’s a culture of downloading Android builds from long forum threads on XDA developers

I did that this month. I wouldn't do that for a device I use for anything sensitive, but I have a niche use case for my old Nexus 5, and it needed to be running at least Android 8.