We’re all used to hearing about how horrible malware is on Android, but a new report is the most disturbing yet. Security firm G Data is projecting that not only will new Android viruses and exploits reach new heights in 2017, but a new one will be discovered once every 10 seconds. But before you toss your Android phone in the trash, let’s explore how bad it really is.

While 8,400 malware discoveries every day is certainly alarming, it’s important to know that they’re not coming from the Play Store. There are millions of Android phones around the world that connect to their own dubious third-party app stores, and millions more that side-load suspect apps to bypass paying for them through the Play Store, and that’s where nearly all of the 3.5 million malware instances will come from this year.

But that’s not to say you’re completely in the clear. Android is the most popular mobile OS by a wide margin, and with popularity comes malfeasance. Android will always be a target for hackers, and as such, Google has taken great strides in Nougat and Android O to limit the chance that your phone could get infected.

No Nougat

There’s just one problem: According to the May distribution numbers, just 7.1 percent of all Android phones are running Nougat, less than the 7.5 percent that were running Marshmallow at this time last year. That means they’re not only missing out on some great features, they’re also behind the times when it comes to security. Many of the phones bought last year will never get the latest update, and even a brand new flagship like the Galaxy S8 is still running an OS that’s several versions behind.