It stops getting guaranteed security updates, whatever that means. If this is really so serious that it enables drive-by attacks on the web, it'd be negligent not to port the fix to older OSes.