This is one place where apple’s ban on alternative browser engines really hurts users, IMO. I’d be pretty comfy using an old iPad that was out of security support, _if_ it had an up to date browser. But since browser engine updates are tied to OS, there’s no way for obsoleted iPads to keep being safely used as cheap browsing machines.
in this sense it might even be possible that using an outdated android is safer, if you’re just browsing and you’ve got an up to date browser.