Absolutely, security updates are much more important than feature updates. Upgrading to newer Android versions is mostly useful to have access to newer Android APIs (apps eventually will require newer versions, although that usually takes quite a while). Another benefit of newer Android versions might be added security features.
kWh is a unit of power consumed. It doesn’t say anything about time and you can’t assume any time period. That wouldn’t make any sense. If you want to say how much power a device consumes, just state how many watts (W) it draws.