Until I need some software which is abandoned and depends on this version which is used on an internal network and thus I’m less concerned about its vulnerabilities.

Suffice to say there’s always a case for its use. I think it should be made clearer when you end up using a vulnerable library, but I think they should remain available.