Yes, nerds and geeks do complain about "support" because we know that having insecure devices/operating systems is what leads to you getting pwned. Your friends say they have no problems, but how do they know if their devices have malware on them? Oh that's right, they don't.
I would never do anything like banking on my phone as it just isn't worth the risk. Some malware could silently be logging your info, login credentials, etc then one day oops, your bank account is empty. Yup, sure was worth using that insecure phone from 5 years ago. That being said Android-based phone companies should support phones longer than 2 years, or 6 months in HTC's case. At least Google upped their supported releases to 3 years last year.