That's fair, but I'm not advocating to use legacy software. But am just highlighting that people and organisations are doing so. Sometimes they have no choice because their business runs on software that requires a specific OS or whatever reason. All we can do is encourage them to take steps to ramp up their security if they refuse to budge.