I think a lot of this stems from the fact that we live in a "why we can't have nice things" world. As long as there are bad actors, there will need to be security updates. So if you don't update, and Microsoft no longer provides security updates for that version, you're in quite the bind.