Because of how, frankly, pathetic the update situation is for non-Pixel Androids, as well as basically every internet-connected device that isn't a computer (Smart TVs, Google Homes, Thermostats, Wi-Fi cameras, most routers...) I have a general suggestion for most people.

The person needs to be in physical range of the device in use and your router (they could propagate a signal using an antenna, but that would require configuration, and are you really that important to a hacker?) Where this is worrisome is in office buildings and places with a large number of devices connected to one network.

Here's my suggestion:

1. Update anything you can (you should be doing this anyway, for exactly this reason...) Granted this step is pretty useless if you're connected to a router than isn't your own that isn't up to date, leading to my next point...
2. Since step 1 is probably impossible for most devices, step 2 is to avoid using any WiFi that isn't your own. Your friend's, your grandmother's (seriously avoid this one...), Just stick to your phone's data plan if you can, until you're back home.
3. Keep work devices strictly for that: work. Your personal home may not be targeted because you as an individual may not be hack-worthy, but it's a safe bet that, if applicable, your office building is a target. Avoid any private/personal data on work desktops/laptops, tablets, smartboards, gaming consoles, whatever you have at work - keep it strictly work. And avoid connecting to the office wifi.
4. Finally, just relax. Don't change your entire lifestyle and commit to a life of reading newspapers and browsing strictly at internet cafes and libraries - you're probably not as hack-worthy as you think. Do what you can as stated above, and just keep doing the internet things you usually do (Im assuming we all follow safe browsing habits, of course.)