On: When does an old iPhone become unsafe to use?

[blub]

A lot of remote vulnerabilities are in iMessage which she’d use heavily I imagine. Other messengers aren’t necessarily safer.

You should get her a new phone. The risk for her isn’t banking, it’s getting spied on by some creep. IMO that could be a lot worse than getting your online banking hacked…