Vulnerability is a 'balance'.
If you have a 'stable,protected' version of a program and it does what YOU need it to, then no 'updating' is required. Hackers have next to zero interest in 'old' versions of Internet accessable programs ,like Operating Systems. There's no challenge. Hack into the latest Chrome for Windows 11+... great, get 'brownie points' from your mates.
I run an old version of eXcel on this Win10 machine. Yeah 'they ' say it can't be done, and it does NOT require OFFICE or Internet access but it does run my business including all federal tax forms. Also great for Inventory control and some 'ugly' math tables for my PIC projects. Heck, I can still run VISIcalc+ on an even older computer, it's never been hacked.
Several of my computers have never been connected to the Internet,don't even have dialup modems.
The biggest problem I have is the 'make money scam' by 'them'. Design an 'ap'(aka a program' ) the public just has to have, force you to buy a new computer to run the new Operating System you have to buy to run that 'must have' ap.
My point.. just because something 'newer' comes along doesn't MAKE it better. 'If it ain't broke,no need to fix'