Legacy controllers

Industrial controllers routinely outlive several generations of the IT equipment around them.

A controller installed in 1998 may still be the correct part for the job, supported by nothing, with no patches and no replacement that does not involve re-engineering the process. This is why "upgrade it" is not useful advice in this environment, and why compensating protection around the device is the realistic conversation.