In reply to Pousada Nerd.

Yes, not updating WordPress is a security issue, not updating PHP is another thing. Next WordPress versions will stay compliant with PHP 7 for a while. So you can stay as safe as possible with php7. Plugins and themes developers will have plenty if time to update their products before PHP8 became the minimal requierment. Be careful with your themes deprecations, it become dangerous with the time..