Except that the web browser is the single largest attack surface on nearly all computers, and refusing to update it is pretty much explicit consent to your computer being used as raw material for botnets, or worse.
exactly. Web browser, and in second place, the operating system itself