You see that update notification. You tap Dismiss. You move on. But that one tap just left a door wide open on your phone. Hackers already know about that gap. You just do not yet.