Why can't I update my iPhone 6 plus to iOS 14?

An iPhone 6 can't be updated beyond 12.5.4, it doesn't have the hardware needed to run a higher iOS.

If I can't update it will it be vulnerable to the malware that the new update protects against?

Apple may issue a security update for 12.5.4. But I cannot see any information about that at the moment.