> The issue is rather that the fixed versions are not being used. Things remain unpatched and running old, stale, versions because upgrading is hard and has a cost attached to it. Many stick to not upgrading their product and rather make the bet that whatever problem that practice might bring in the future, it is cheaper than doing upgrades. Capitalism.
This pretty much nails the situation. BTW, I think the author is not necessarily criticizing "Capitalism", but acknowledging the fact that most businesses and individuals will often prioritize financial interests over security and risk managment.