My dad hates upgrading software because they mess with the UI and remove features he likes. He is not security conscious and is subject to attack.

The vendors take shortcuts, and force UX on usera because they don't want to bother back porting security fixes or making security code separable from UX feature code