The OpenSSH they were using was from 2014/2015 so they probably didn't update the OS or anything at all for a while