Malware that can hit Android 6 can probably also hit Android 7, 8, and 9. Obviously how you use the device makes a difference, but the malware is still being made and you have to be careful.