I'm not saying it isn't patched. It is just not bleeding edge or changing rapidly therefore the tradeoffs are different.

There's stuff out there that is nearing relic status that is still up and running and not patched or supported. Some of it isn't even touching a network so that's fine.