It's an appliance with huge gaping security flaws that its very creator says you should use under approximately no circumstances.
> For what it's worth, the "XP" OS is often licensed and supported for well longer than a consumer SKU. IIRC microsoft provided support and security updates for embedded/appliance applications until 2019!
You're 100% right but that still means the thing has been sitting around for half a decade with no security updates whatsoever.
There is a fine line between stability and simply being a miser and refusing to update things within a reasonable period of time. Healthcare, especially corporate healthcare run by people other than physicians, is far to much on the miser end of the spectrum.