True, but it’s generally a lot easier to patch software than expect someone to update their whole OS.

(Generally. I know plenty of shops deployed Exchange in 2009 and it still works so why fix it, goshdarnit! Those people aren’t generally updating their OS either though.)