How sensible and sensitive is our private world with Android devices? Is it optional to use Antivirus programs and VPN shields?

AVG Internet Security / AVG Antivirus AVG Antivirus / AVG Internet Security for Android
1

How vulnerable are these mobile devices? If I never root my devices or install APK from not especially trusted sources is my cellphone an open door to anyone with skills?