I meant that most vulnerabilities in the wild that pose a threat to users and end up actually being exploited by malware, are the ones usually covered by updating Google Play services.

Yes, kernel vulns will always be uncovered, but how often does the average user encounter malware that exploits that attack vector?

The biggest attack vectors on Android are Google Play services and your browser. Keep those up to that and you're good even with older phones.