Legacy systems

Legacy systems persist because they work and replacing them is expensive, not because nobody has noticed.

Telling people to upgrade is rarely useful advice: they know. The productive questions are what compensating protection is possible around something that cannot be patched, what the plan is when the last person who understands it retires, and what the replacement would actually cost, since that number is usually never established.