> Why is it that even slightly old systems are so buggy that they are trivially hackable for a moderately well funded group?

Slightly old here means 13 years after the latest release in case of Windows XP.

That's a very long time for anyone to upgrade.