> Their extended support model still allows for backporting fixes into jessie of all things, which released almost 8 years ago.

So your evidence that they don't update things is that they backport new fixes to an EOL version? Even if that made sense, 8 years is 0.8 decades; I think a lot of the pushback is that you said "decades old versions", which is to say "versions of packages that are at least 20 years old", which is wildly out of line with reality.