People who want to prevent their devices from being swept into botnets should install security updates in a timely manner and resist the urge to continue using software or devices that no longer receive them.

Or not install apps from untrusted sources. Like, the Play Store.